DNSSEC - OARC Size Tester
Page content
Talk from @mwl at BSDCAN 2022
https://www.youtube.com/watch?v=1n62VZj-CKI
OARC Reply Size Tester
dig +short rs.dns-oarc.net TXT
Host1 - good :)
# dig +short rs.dns-oarc.net TXT
rst.x4090.rs.dns-oarc.net.
rst.x4058.x4090.rs.dns-oarc.net.
rst.x4064.x4058.x4090.rs.dns-oarc.net.
"45.15.80.80 DNS reply size limit is at least 4090"
"45.15.80.80 sent EDNS buffer size 4096"
Host2 - bad :(
# dig +short rs.dns-oarc.net TXT
rst.x1196.rs.dns-oarc.net.
rst.x1206.x1196.rs.dns-oarc.net.
rst.x1204.x1206.x1196.rs.dns-oarc.net.
"74.63.25.240 DNS reply size limit is at least 1206"
"74.63.25.240 sent EDNS buffer size 1232"
Any Comments ?
sha256: 110b220f93eff767b7e4d488294b00ede4f4509258d0148704b145df79fa9821