[Dnsmasq-discuss] dnsmasq - freature "request" (minimal-responses=yes)

[Simon Kelley]

On 10/06/13 10:53, Tomáš Thiemel wrote:
> Hello Simon,
> I'd like to ask, if you're going to add support for "minimal responses"
> like in BIND nameserver:
>
>
>
> I've installed Ubuntu 12.04 to a friend of mine, but there was a little
> problem - web browser (Firefox) wasn't able to resolve DNS address
> "fbcdn-profile-a.akamaihd.net.edgesuite.net"
>
> The issue was related to Dnsmasq, as the network setup was:
>
> INTERNET (ISP's DNS) -> router with OpenWRT (dnsmasq) -> Ubuntu 12.04
> (dnsmasq)
>
> When I wanted to do "dig" command in Ubuntu, I've got reply "Truncated,
> retrying in TCP mode"
>
>
> Here is output from "dig" at the OpenWRT router:
>
> root at OpenWrt:~# dig fbcdn-profile-a.akamaihd.net @8.8.8.8
> ...
> ;; Query time: 28 msec
> ;; SERVER: 8.8.8.8#53(8.8.8.8)
> ;; WHEN: Mon Jun 10 11:17:50 2013
> ;; MSG SIZE  rcvd: 345
>
> root at OpenWrt:~# dig fbcdn-profile-a.akamaihd.net
> ...
> ;; Query time: 9 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Mon Jun 10 11:17:37 2013
> ;; MSG SIZE  rcvd: 742
>
> The main problem is that ISP's DNS server returns "full response", which
> is just forwarded by dnsmasq.
>
> I would appreciate "minimal-response=yes" parameter/option in the
> dnsmasq.conf config file. If it's too complicated to add this feature,
> just ignore this "request".
>
> Thank you very much.
>
> Best regards,
>
> Tomas Thiemel
> thiemel at centrum.cz
>
>

In the context of dnsmasq, I guess this would work by stripping the 
authority and additional sections from the reply, and, if the result 
fits in the packet as received, reseting the truncated bit. That would 
be possible, but I'm not sure it's the correct solution to your problem. 
It should be that the query gets retried, by the resolver in the Ubuntu 
machine, using TCP. My guess is that the query does get retried, but 
something in the chain is blocking TCP over port 53. That's the real 
problem.

What happens when you repeat you dig requests, but add +vc to the 
command line?

Cheers,

Simon.