EDNS Compliance Tester

Checking: 'sks-keyservers.net' as at 2019-02-26T19:43:04Z

sks-keyservers.net. @192.146.137.10 (ns.dan.me.uk.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet
sks-keyservers.net. @2001:67c:26b4:7:21e:bff:fec7:87a (ns.dan.me.uk.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet

sks-keyservers.net. @5.135.174.95 (ns.dan.network.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=timeout optlist=ok,expire,cookie,subnet
sks-keyservers.net. @2001:41d0:2:c060::95 (ns.dan.network.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet

sks-keyservers.net. @51.38.91.188 (ns.dan.xxx.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet
sks-keyservers.net. @2001:41d0:800:d1e:1d73:f786:a96e:d647 (ns.dan.xxx.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet

sks-keyservers.net. @212.83.186.188 (ns.dan.host.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet
sks-keyservers.net. @2001:470:1f13:da3::188 (ns.dan.host.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet

sks-keyservers.net. @193.84.87.11 (ns-global.kjsl.com.): dns=servfail edns=servfail edns1=ok edns@512=servfail ednsopt=servfail edns1opt=ok do=servfail ednsflags=servfail docookie=servfail edns512tcp=servfail optlist=servfail,nsid (ns-a.hwd.kjsl.com)
sks-keyservers.net. @2607:7c80:53::53 (ns-global.kjsl.com.): dns=timeout edns=timeout edns1=timeout edns@512=timeout ednsopt=timeout edns1opt=timeout do=timeout ednsflags=timeout docookie=timeout edns512tcp=timeout optlist=timeout

sks-keyservers.net. @82.148.225.245 (ns.dan.is.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet
sks-keyservers.net. @2a00:1b98:1:0:20c:29ff:fe83:d782 (ns.dan.is.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet

sks-keyservers.net. @192.146.137.185 (s01.sks-keyservers.net.): dns=ok edns=ok edns1=ok edns@512=ok ednsopt=ok edns1opt=ok do=ok ednsflags=ok docookie=ok,cookie edns512tcp=ok optlist=ok,expire,cookie,subnet

The Following Tests Failed

Warning: test failures may indicate that some DNS clients cannot resolve the zone or will get a unintended answer or resolution will be slower than necessary.

Warning: failure to address issues identified here may make future DNS extensions that you want to use ineffective. In particular echoing back unknown EDNS options and unknown EDNS flags will break future signaling between DNS client and DNS server. We already have examples of this where you cannot depend on the AD flag bit meaning anything in replies because too many DNS servers just echo it back. Similarly the EDNS Client Subnet (ECS) option cannot just be sent to everyone in part because of servers just echoing it back.

Codes

To retrieve this report in the future: https://ednscomp.isc.org/ednscomp/0f65feeaa7

The source code for the tester can be downloaded from ISC Open Source Projects / DNS-Compliance-Testing.

For more information about EDNS please see the main site.




(IPv4 or IPv6)

© 2015 Internet Systems Consortium - Powered By: CGIC (Basic License) - Boutell.Com, Inc.