From: Colin Vidal <colin@isc.org>
Date: Wed, 25 Feb 2026 10:02:23 +0000 (+0100)
Subject: [9.20] fix: usr:  Remove deterministic selection of nameserver
X-Git-Tag: v9.20.20~7
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c6c6e490fd8c1143ed0be3ea633ab268561799d5;p=thirdparty%2Fbind9.git

[9.20] fix: usr:  Remove deterministic selection of nameserver

When selecting nameserver addresses to be looked up we where
always selecting them in dnssec name order from the start of
the nameserver rrset.  This could lead to resolution failure
despite there being address that could be resolved for the
other names.  Use a random starting point when selecting which
names to lookup.

Closes #5695

Closes #5745

Backport of MR !11395

Merge branch 'backport-5695-add-random-server-selection-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11600
---

c6c6e490fd8c1143ed0be3ea633ab268561799d5