IssueTracker

In a zone that is not configured according to the standards, it seems there is a flipping of the responses when the DS resource record (RR) is queried. Expect: The DS RR should only be queried in the upstream zone (in this case: uk).

-> This appears only on the Frankfurt/DE side. The behavior could not be reproduced at other locations.

The domain is only to demonstrate the issue. The same behavior can be observed when quering the resolver Frankfurt side for other domains with a similar setup. There is no dependence for this issue with the TLD .uk, as the same behavior can be reproduced for TLD .de as well.

1)

%dig  @8.8.8.8 arogs.co.uk ds +nsid

; <<>> DiG 9.18.28-0ubuntu0.24.04.1-Ubuntu <<>> @8.8.8.8 arogs.co.uk ds +nsid
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36935
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; NSID: 67 70 64 6e 73 2d 66 72 61 ("gpdns-fra")
;; QUESTION SECTION:
;arogs.co.uk.                   IN      DS

;; AUTHORITY SECTION:
co.uk.                  1795    IN      SOA     dns1.nic.uk. hostmaster.nominet.org.uk. 1733152005 900 300 2419200 10800

;; Query time: 5 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Mon Dec 02 16:06:57 CET 2024
;; MSG SIZE  rcvd: 121

2)

%dig  @8.8.8.8 arogs.co.uk ds +nsid

; <<>> DiG 9.18.28-0ubuntu0.24.04.1-Ubuntu <<>> @8.8.8.8 arogs.co.uk ds +nsid
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62186
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; NSID: 67 70 64 6e 73 2d 66 72 61 ("gpdns-fra")
;; QUESTION SECTION:
;arogs.co.uk.                   IN      DS

;; ANSWER SECTION:
arogs.co.uk.            3107    IN      CNAME   883199.parkingcrew.net.

;; AUTHORITY SECTION:
parkingcrew.net.        900     IN      SOA     ns-1403.awsdns-47.org. hostmaster.parkingcrew.com. 1 7200 900 1209600 86400

;; Query time: 7 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Mon Dec 02 16:06:58 CET 2024
;; MSG SIZE  rcvd: 172


3)
%dig @nsb.nic.uk arogs.co.uk ds +nsid ds
;; Warning, extra type option

; <<>> DiG 9.18.28-0ubuntu0.24.04.1-Ubuntu <<>> @nsb.nic.uk arogs.co.uk ds +nsid ds
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57291
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; NSID: 75 2d 63 69 2d 6e 6f 6d 69 6e 65 74 31 2e 67 62 6c 6f 6e 31 ("u-ci-nominet1.gblon1")
; COOKIE: 7df757f2cd848dbc01000000674dcd6ab78b90c9e5f73b26 (good)
;; QUESTION SECTION:
;arogs.co.uk.                   IN      DS

;; AUTHORITY SECTION:
co.uk.                  10800   IN      SOA     dns1.nic.uk. hostmaster.nominet.org.uk. 1733152095 900 300 2419200 10800

;; Query time: 11 msec
;; SERVER: 2001:502:2eda::3#53(nsb.nic.uk) (UDP)
;; WHEN: Mon Dec 02 16:08:26 CET 2024
;; MSG SIZE  rcvd: 160