plugin/forward: check TC correctly on reply. (#1670)
* plugin/forward: check TC correctly on reply. Add test for this. * Add proxy test as well
This commit is contained in:
parent
9ae9ee4b6b
commit
305ae9b9bc
4 changed files with 123 additions and 5 deletions
|
@ -114,7 +114,7 @@ func (f *Forward) ServeDNS(ctx context.Context, w dns.ResponseWriter, r *dns.Msg
|
||||||
child.Finish()
|
child.Finish()
|
||||||
}
|
}
|
||||||
|
|
||||||
ret, err = truncated(ret, err)
|
ret, err = truncated(state, ret, err)
|
||||||
upstreamErr = err
|
upstreamErr = err
|
||||||
|
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
|
|
@ -33,7 +33,7 @@ func (f *Forward) Forward(state request.Request) (*dns.Msg, error) {
|
||||||
|
|
||||||
ret, err := proxy.connect(context.Background(), state, f.forceTCP, true)
|
ret, err := proxy.connect(context.Background(), state, f.forceTCP, true)
|
||||||
|
|
||||||
ret, err = truncated(ret, err)
|
ret, err = truncated(state, ret, err)
|
||||||
upstreamErr = err
|
upstreamErr = err
|
||||||
|
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
|
|
@ -1,10 +1,14 @@
|
||||||
package forward
|
package forward
|
||||||
|
|
||||||
import "github.com/miekg/dns"
|
import (
|
||||||
|
"github.com/coredns/coredns/request"
|
||||||
|
|
||||||
|
"github.com/miekg/dns"
|
||||||
|
)
|
||||||
|
|
||||||
// truncated looks at the error and if truncated return a nil errror
|
// truncated looks at the error and if truncated return a nil errror
|
||||||
// and a possible reconstructed dns message if that was nil.
|
// and a possible reconstructed dns message if that was nil.
|
||||||
func truncated(ret *dns.Msg, err error) (*dns.Msg, error) {
|
func truncated(state request.Request, ret *dns.Msg, err error) (*dns.Msg, error) {
|
||||||
// If you query for instance ANY isc.org; you get a truncated query back which miekg/dns fails to unpack
|
// If you query for instance ANY isc.org; you get a truncated query back which miekg/dns fails to unpack
|
||||||
// because the RRs are not finished. The returned message can be useful or useless. Return the original
|
// because the RRs are not finished. The returned message can be useful or useless. Return the original
|
||||||
// query with some header bits set that they should retry with TCP.
|
// query with some header bits set that they should retry with TCP.
|
||||||
|
@ -16,7 +20,7 @@ func truncated(ret *dns.Msg, err error) (*dns.Msg, error) {
|
||||||
m := ret
|
m := ret
|
||||||
if ret == nil {
|
if ret == nil {
|
||||||
m = new(dns.Msg)
|
m = new(dns.Msg)
|
||||||
m.SetReply(ret)
|
m.SetReply(state.Req)
|
||||||
m.Truncated = true
|
m.Truncated = true
|
||||||
m.Authoritative = true
|
m.Authoritative = true
|
||||||
m.Rcode = dns.RcodeSuccess
|
m.Rcode = dns.RcodeSuccess
|
||||||
|
|
114
plugin/forward/truncated_test.go
Normal file
114
plugin/forward/truncated_test.go
Normal file
|
@ -0,0 +1,114 @@
|
||||||
|
package forward
|
||||||
|
|
||||||
|
import (
|
||||||
|
"sync/atomic"
|
||||||
|
"testing"
|
||||||
|
|
||||||
|
"github.com/coredns/coredns/plugin/pkg/dnstest"
|
||||||
|
"github.com/coredns/coredns/plugin/test"
|
||||||
|
"github.com/coredns/coredns/request"
|
||||||
|
|
||||||
|
"github.com/miekg/dns"
|
||||||
|
)
|
||||||
|
|
||||||
|
func TestLookupTruncated(t *testing.T) {
|
||||||
|
i := int32(0)
|
||||||
|
s := dnstest.NewServer(func(w dns.ResponseWriter, r *dns.Msg) {
|
||||||
|
j := atomic.LoadInt32(&i)
|
||||||
|
atomic.AddInt32(&i, 1)
|
||||||
|
|
||||||
|
if j == 0 {
|
||||||
|
ret := new(dns.Msg)
|
||||||
|
ret.SetReply(r)
|
||||||
|
ret.Truncated = true
|
||||||
|
ret.Answer = append(ret.Answer, test.A("example.org. IN A 127.0.0.1"))
|
||||||
|
w.WriteMsg(ret)
|
||||||
|
return
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
ret := new(dns.Msg)
|
||||||
|
ret.SetReply(r)
|
||||||
|
ret.Answer = append(ret.Answer, test.A("example.org. IN A 127.0.0.1"))
|
||||||
|
w.WriteMsg(ret)
|
||||||
|
})
|
||||||
|
defer s.Close()
|
||||||
|
|
||||||
|
p := NewProxy(s.Addr, nil /* no TLS */)
|
||||||
|
f := New()
|
||||||
|
f.SetProxy(p)
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
state := request.Request{W: &test.ResponseWriter{}, Req: new(dns.Msg)}
|
||||||
|
|
||||||
|
resp, err := f.Lookup(state, "example.org.", dns.TypeA)
|
||||||
|
if err != nil {
|
||||||
|
t.Fatal("Expected to receive reply, but didn't")
|
||||||
|
}
|
||||||
|
// expect answer with TC
|
||||||
|
if !resp.Truncated {
|
||||||
|
t.Error("Expected to receive reply with TC bit set, but didn't")
|
||||||
|
}
|
||||||
|
|
||||||
|
resp, err = f.Lookup(state, "example.org.", dns.TypeA)
|
||||||
|
if err != nil {
|
||||||
|
t.Fatal("Expected to receive reply, but didn't")
|
||||||
|
}
|
||||||
|
// expect answer without TC
|
||||||
|
if resp.Truncated {
|
||||||
|
t.Error("Expected to receive reply without TC bit set, but didn't")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func TestForwardTruncated(t *testing.T) {
|
||||||
|
i := int32(0)
|
||||||
|
s := dnstest.NewServer(func(w dns.ResponseWriter, r *dns.Msg) {
|
||||||
|
j := atomic.LoadInt32(&i)
|
||||||
|
atomic.AddInt32(&i, 1)
|
||||||
|
|
||||||
|
if j == 0 {
|
||||||
|
ret := new(dns.Msg)
|
||||||
|
ret.SetReply(r)
|
||||||
|
ret.Truncated = true
|
||||||
|
ret.Answer = append(ret.Answer, test.A("example.org. IN A 127.0.0.1"))
|
||||||
|
w.WriteMsg(ret)
|
||||||
|
return
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
ret := new(dns.Msg)
|
||||||
|
ret.SetReply(r)
|
||||||
|
ret.Answer = append(ret.Answer, test.A("example.org. IN A 127.0.0.1"))
|
||||||
|
w.WriteMsg(ret)
|
||||||
|
})
|
||||||
|
defer s.Close()
|
||||||
|
|
||||||
|
f := New()
|
||||||
|
|
||||||
|
p1 := NewProxy(s.Addr, nil /* no TLS */)
|
||||||
|
f.SetProxy(p1)
|
||||||
|
p2 := NewProxy(s.Addr, nil /* no TLS */)
|
||||||
|
f.SetProxy(p2)
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
state := request.Request{W: &test.ResponseWriter{}, Req: new(dns.Msg)}
|
||||||
|
state.Req.SetQuestion("example.org.", dns.TypeA)
|
||||||
|
resp, err := f.Forward(state)
|
||||||
|
if err != nil {
|
||||||
|
t.Fatal("Expected to receive reply, but didn't")
|
||||||
|
}
|
||||||
|
|
||||||
|
// expect answer with TC
|
||||||
|
if !resp.Truncated {
|
||||||
|
t.Error("Expected to receive reply with TC bit set, but didn't")
|
||||||
|
}
|
||||||
|
|
||||||
|
resp, err = f.Forward(state)
|
||||||
|
if err != nil {
|
||||||
|
t.Fatal("Expected to receive reply, but didn't")
|
||||||
|
}
|
||||||
|
// expect answer without TC
|
||||||
|
if resp.Truncated {
|
||||||
|
t.Error("Expected to receive reply without TC bit set, but didn't")
|
||||||
|
}
|
||||||
|
}
|
Loading…
Add table
Reference in a new issue