Round-Robin DNS Responses

[Jarrod-20]

The attached patch (against 2.20.3) implements Round-Robin responses into DNRD.

The first time a packet it returned from the cache, it will
disassemble it (into the new hdr->disassembly structure).

Every time a packet is pulled from the cache it will use
hdr->disassembly to rebuild the packet, but:
  The AN and AR sections will be "rotated" to provide round-robin responses
  The TTL fields will be decremented appropriately
  If it fails to parse or rebuild the packet, the original packet will
be returned

This is to be considered highly experimental - I don't think it should
go into a numbered version quite yet! It has worked so far in my
testing, but needs to be used much more extensively to ensure there
are no bugs.

I have tried to ensure that any potential buffer overflows are caught
- in fact I am more likely to have a bug whereby you can't use the
last byte of a buffer - but there are no guarantees associated, and I
don't recommend running this anywhere critical yet.

Stylistically, it could do with some tidying up :)

DNRD will still not carry data from one query into another, and as
such is still immune to the recent spate of NS poisoning attacks, I
believe.

Please give it a try, and see if you can break it.

--
Jarrod Lowe


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Dnrd-user mailing list
Dnrd-user@...
https://lists.sourceforge.net/lists/listinfo/dnrd-user

[Jarrod-20]

2008/11/11 Jarrod <dnrd@...>:
> The attached patch (against 2.20.3) implements Round-Robin responses into DNRD.
Oh, I forgot - it actually depends on 2.20.3 plus my previous expiry
time patch (which is now in SVN) - but purely because I add some lines
nearby a change from that patch.

I just grabbed the SVN version now, and it patches fine except for one
debugging line in main.c, which isn't needed.

I know that needs cleaning up, but I want to get some other people
debugging it beforehand. DNS now hurts my head :(

P.S. The web interface to the SVN repository seems to be unavailable.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Dnrd-user mailing list
Dnrd-user@...
https://lists.sourceforge.net/lists/listinfo/dnrd-user