DNS/TCP/www3.nhk.or.jpについて、ここに記述してください。 unbound 1.5.8 で tcp-upstream:yes にしたら、   resolveできるところとできないところが発生している。 TCPがどう関係するのか、調べてみるのにいいので、続ける。   https://www.usenix.org/conference/fast16/technical-sessions/presentation/manousakis OK == www3.nhk.or.jp == {{{ $ dnsq a www3.nhk.or.jp a.dns.jp 1 www3.nhk.or.jp: 100 bytes, 1+0+2+2 records, response, noerror query: 1 www3.nhk.or.jp authority: nhk.or.jp 86400 NS ns10.nhk.or.jp authority: nhk.or.jp 86400 NS ns.nhk.or.jp additional: ns.nhk.or.jp 86400 A 133.127.64.240 additional: ns10.nhk.or.jp 86400 A 133.127.255.71 }}} $dnsq a www3.nhk.or.jp 133.127.64.240 {{{ 1 www3.nhk.or.jp: 74 bytes, 1+1+0+0 records, response, authoritative, noerror query: 1 www3.nhk.or.jp answer: www3.nhk.or.jp 600 CNAME www3.nhk.or.jp.edgesuite.net }}} このあたりですでに嫌なものを感じる。 $ dnsq a www3.nhk.or.jp.edgesuite.net a.gtld-servers.net {{{ 1 www3.nhk.or.jp.edgesuite.net: 505 bytes, 1+0+13+11 records, response, noerror query: 1 www3.nhk.or.jp.edgesuite.net authority: edgesuite.net 172800 NS ns1-2.akam.net authority: edgesuite.net 172800 NS usw6.akam.net authority: edgesuite.net 172800 NS adns1.akam.net authority: edgesuite.net 172800 NS adns2.akam.net authority: edgesuite.net 172800 NS adns3.akam.net authority: edgesuite.net 172800 NS ns4-65.akam.net authority: edgesuite.net 172800 NS ns7-65.akam.net authority: edgesuite.net 172800 NS ns5-65.akam.net authority: edgesuite.net 172800 NS a13-64.akam.net authority: edgesuite.net 172800 NS a24-64.akam.net authority: edgesuite.net 172800 NS a5-64.akam.net authority: edgesuite.net 172800 NS a18-64.akam.net authority: edgesuite.net 172800 NS a26-64.akam.net additional: ns1-2.akam.net 172800 A 193.108.91.2 additional: ns1-2.akam.net 172800 28 &\000\024\001\000\002\000\000\000\000\000\000\000\000\000\002 additional: usw6.akam.net 172800 A 23.61.199.64 additional: adns1.akam.net 172800 A 96.7.50.66 additional: adns2.akam.net 172800 A 72.246.46.66 additional: adns3.akam.net 172800 A 184.26.161.67 additional: ns4-65.akam.net 172800 A 84.53.139.65 additional: ns7-65.akam.net 172800 A 96.7.49.65 additional: ns5-65.akam.net 172800 A 184.85.248.65 additional: a13-64.akam.net 172800 A 2.22.230.64 additional: a24-64.akam.net 172800 A 2.16.130.64 }}} $ dnsq a www3.nhk.or.jp.edgesuite.net 23.61.199.64 {{{ 1 www3.nhk.or.jp.edgesuite.net: 76 bytes, 1+1+0+0 records, response, authoritative, noerror query: 1 www3.nhk.or.jp.edgesuite.net answer: www3.nhk.or.jp.edgesuite.net 21600 CNAME a1702.g1.akamai.net tmaeno@tm:~$ dnsq a a1702.g1.akamai.net a.gtld-servers.net 1 a1702.g1.akamai.net: 510 bytes, 1+0+13+13 records, response, noerror query: 1 a1702.g1.akamai.net authority: akamai.net 172800 NS zc.akamaitech.net authority: akamai.net 172800 NS zd.akamaitech.net authority: akamai.net 172800 NS ze.akamaitech.net authority: akamai.net 172800 NS zg.akamaitech.net authority: akamai.net 172800 NS zh.akamaitech.net authority: akamai.net 172800 NS zi.akamaitech.net authority: akamai.net 172800 NS ns3-193.akamaitech.net authority: akamai.net 172800 NS ns2-193.akamaitech.net authority: akamai.net 172800 NS ns4-193.akamaitech.net authority: akamai.net 172800 NS ns6-193.akamaitech.net authority: akamai.net 172800 NS ns7-193.akamaitech.net authority: akamai.net 172800 NS ns5-193.akamaitech.net authority: akamai.net 172800 NS ns1-1.akamaitech.net additional: zc.akamaitech.net 172800 A 23.74.25.192 additional: zd.akamaitech.net 172800 A 95.101.36.192 additional: ze.akamaitech.net 172800 A 184.26.161.192 additional: zg.akamaitech.net 172800 A 96.7.50.192 additional: zh.akamaitech.net 172800 A 23.211.133.192 additional: zi.akamaitech.net 172800 A 184.26.161.192 additional: ns3-193.akamaitech.net 172800 A 23.61.199.193 additional: ns2-193.akamaitech.net 172800 A 2.22.230.193 additional: ns4-193.akamaitech.net 172800 A 84.53.139.193 additional: ns6-193.akamaitech.net 172800 A 95.100.168.193 additional: ns7-193.akamaitech.net 172800 A 96.7.49.193 additional: ns5-193.akamaitech.net 172800 A 184.85.248.193 additional: ns1-1.akamaitech.net 172800 A 193.108.88.1 tmaeno@tm:~$ dnsq a a1702.g1.akamai.net a1702.g1.akamai.net dnsq: fatal: unable to parse: temporary failure tmaeno@tm:~$ dnsq a a1702.g1.akamai.net 23.74.25.192 1 a1702.g1.akamai.net: 341 bytes, 1+0+8+8 records, response, noerror query: 1 a1702.g1.akamai.net authority: g1.akamai.net 4000 NS a1g1.akamai.net authority: g1.akamai.net 6000 NS n1g1.akamai.net authority: g1.akamai.net 8000 NS n4g1.akamai.net authority: g1.akamai.net 6000 NS n5g1.akamai.net authority: g1.akamai.net 8000 NS n2g1.akamai.net authority: g1.akamai.net 4000 NS n3g1.akamai.net authority: g1.akamai.net 4000 NS n0g1.akamai.net authority: g1.akamai.net 6000 NS a0g1.akamai.net additional: n3g1.akamai.net 4000 A 173.222.133.4 additional: n4g1.akamai.net 8000 A 173.222.133.7 additional: n2g1.akamai.net 8000 A 88.221.81.192 additional: a1g1.akamai.net 4000 28 &\000\024\027\000-\360\000\205\016D[c5\303W additional: a0g1.akamai.net 6000 28 &\000\024\027\000-\360\000\205\017D[c5\303W additional: n0g1.akamai.net 4000 A 124.40.42.53 additional: n1g1.akamai.net 6000 A 69.192.3.52 additional: n5g1.akamai.net 6000 A 173.222.133.6 tmaeno@tm:~$ dnsq a a1702.g1.akamai.net 173.222.133.4 1 a1702.g1.akamai.net: 85 bytes, 1+3+0+0 records, response, authoritative, noerror query: 1 a1702.g1.akamai.net answer: a1702.g1.akamai.net 20 A 110.232.152.66 answer: a1702.g1.akamai.net 20 A 110.232.152.32 answer: a1702.g1.akamai.net 20 A 110.232.152.58 }}}