Am 12.04.2014 16:55, schrieb Paul Wouters:
On Sat, 12 Apr 2014, Reindl Harald wrote:
> a DNS server doing recursion don't ask any forwarder
That's wrong. a DNS server can use a forwareder for some or all of its
recursive queries. unbound+dnssec-triggerd mostly cause unbound to do
full recursion but using the ISP nameserver as forward for all queries.
oh no - please try to understand what recursion means in case of DNS
may i suggest to read some docs because if i talk about DNS as one
who maintains 600 domains as DNS provider as well as Registry for
the .at domain and implemented DNS admin-backends years ago i know
what i am talking about
recursion is by definition
* ask the root server for example.com
* answer of the root is "dunno, but you can ask xxx for .com"
* your DNS asks xxx for example.com
* answer of xxx is "dunno, but you can ask ns1.whoever.tld for example.com"
forwarding bypasses that and asks your ISP's or whatever configured
nameserver and never the root, so no, you don't do recursion in that
case, your forwarder may do or at least the last forwarder if the
DNS you asking itself does forwarding too - but that's not your
business then and you don't to recursion