In message <9fa7a153-19cb-420a-bee2-2f0dc9c70...@sinodun.com>, Sara Dickinson w rites: > > > On 22 Feb 2016, at 18:41, Bob Harold <rharo...@umich.edu> wrote: > > > > I am not understanding one thing. > > > > 3.3.2. Sending Responses > > > > Says that a server "that receives a query ... without the > > edns-tcp-keepalive option ... MAY include the edns-tcp-keepalive option > > in the response" > > > > But > > > > 3.4. TCP Session Management > > > > Indicates that a server can only send the edns-tcp-keepalive option in > > an answer if the client includes it in the request. > > > It is subtle, but is the difference between an EDNS0 OPT RR and a > specific EDNS0 option: > > - yes, the server can only send an EDNS0 OPT RR if the client includes > one in the request but > - as long as there was an EDNS0 OPT RR in the request, the server can > send back the edns-tcp-keepalive option even there wasnt one in the OPT > RR in the request.
Strictly speaking the additional section can have anything the server feels is relevent including a OPT record (this in RFC 1034). Clients are expected to cope with anything added to the additional section. 6. Using local data only, attempt to add other RRs which may be useful to the additional section of the query. Exit. That said it is pointless to add a OPT record unless you know the client understands OPT. Using a extended rcode would also be problematic as they require that the client understand OPT records which can't be determined unless you have see a OPT in the request. Unknown EDNS options are expected to be ignored in both requests and replies so it is safe to add a unknown EDNS option to either. This actually means you can add this option to any response but I would limit it to responses where there was a OPT record in the request. Mark > Sara. > > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop