DNS/Deadwood/検索動作について、ここに記述してください。
引用元: http://maradns.samiam.org/deadwood/doc/Recursive-algorithm.html
/2 How Deadwood stops blind spoofing attacks
/3 Handling "incomplete" answersHandling "incomplete" answers
/4 Linking names to IPs
1. How Deadwood resolves a name
A simplified version of the method Deadwood uses to resolve a domain via recursion is as follows:
- Deadwood gets a request to resolve a given domain from a stub resolver
- Deadwood requests a domain from a root server.
- Deadwood gets an answer from that server.
- Deadwood looks at the answer.
- There are three types of answers Deadwood can get:
- A complete answer that answers the DNS question.
- An incomplete NS referral, which can either have glue or be glueless.
- An incomplete CNAME referral
- If the answer is a complete answer, Deadwood sends the answer back to the stub resolver.
- If the answer is an incomplete answer, Deadwood must send more queries to get a complete answer.
- I will detail this process below.
/3 Handling "incomplete" answersHandling "incomplete" answers
検索はつねに root server から始めるようだ。
- referral で返ってきた NS レコードは NS レコードとしてはキャッシュされない。