Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    EDNS processing correctly in 2.5.0.r ?

    Scheduled Pinned Locked Moved DHCP and DNS
    6 Posts 3 Posters 558 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Sergei_ShablovskyS
      Sergei_Shablovsky
      last edited by Sergei_Shablovsky

      Hi dear pfSense Gurus!

      After 1 Feb 2021 (The DNS Flag Day) the process of updating DNS servers software on all operators start, and almost 1 year and 14 days done...

      Are anyone has some issues as a result of implementing EDNS on upstream ?

      —
      CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
      Help Ukraine to resist, save civilians people’s lives !
      (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @Sergei_Shablovsky
        last edited by

        Where are you seeing info for flag day 2021?

        the edns stuff was from 2019.. I am not seeing any info provided for flagday 2021?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        Sergei_ShablovskyS 1 Reply Last reply Reply Quote 0
        • Sergei_ShablovskyS
          Sergei_Shablovsky @johnpoz
          last edited by

          @johnpoz Sorry my stupidness, I mean 2020-10-01 (October 1st 2020). :)

          And main question was "are someone has any issue"?

          —
          CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
          Help Ukraine to resist, save civilians people’s lives !
          (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @Sergei_Shablovsky
            last edited by johnpoz

            Where you seeing any issues with this, there are not problems with this in 2.4.5p1 - why would you think it would regress in 2.5, when 2.5 is using newer version of unbound.

            The default buffer size in unbound is

            edns-buffer-size: 4096
            

            The min for that is to set 1232 as a min.. Well over that, and the tcp.. Would be allowed outbound for resolving be default.. The only way anyone could have problems with this is they shot themselves in their own foot. And to be honest they would work hard at it - like forging the gun from ore they dug up, and then also making the bullets by hand after gathering the chemicals to make gun powder hard ;)

            Run the test they provide..
            https://dnsflagday.net/2020/#action-dns-resolver-operators

            test.png

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              The changes for that were already in 2.4.5-p1

              https://redmine.pfsense.org/issues/10293

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @jimp
                last edited by

                Yup you can see them in the gui..

                yupcanseehereinthegui.png

                Like said you would really have to try hard to mess this up ;) Since it defaults to 4096..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.