]> git.ipfire.org Git - thirdparty/bind9.git/commit
Do not cache NS from referral in negative responses
authorColin Vidal <colin@isc.org>
Fri, 27 Feb 2026 16:07:31 +0000 (17:07 +0100)
committerColin Vidal <colin@isc.org>
Mon, 30 Mar 2026 18:41:13 +0000 (20:41 +0200)
commitf2f9a9752662260c7a67db89853011f9ab2d3af4
treeafc56e63f7fa9357859065e5cafb9443bff6da68
parentbc8f0b3a798863b811103c3de42401728941eadf
Do not cache NS from referral in negative responses

Stop storing the NS referral into the main cache when processing a
negative response.  These records are already cached in the delegation
database and are not needed elsewhere.

Update dnssec tests that relied on parent-side NS RRsets being
returned in recursive query responses.
bin/tests/system/dnssec/tests_validation.py
lib/dns/resolver.c