Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add workflow for updating tld.h file #121

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

Falci
Copy link
Member

@Falci Falci commented Nov 24, 2023

This PR adds a GitHub action script that will:

  • Checkout and install hs-names with its dependencies
  • Download the TLD and zone file from ICANN
  • Update the src/tld.h
  • Commit and create a PR

There's no automatic trigger for this action. It needs to be manually triggered from the actions page.

@rithvikvibhu
Copy link
Member

Tried this out and running the workflow (manually) created a PR.

I also wanted to collect some data on how often the root zone changes and affects resolvability, but hnsd seems to be unstable when it gets a few queries that respond with SERVFAIL. It starts responding with NXDOMAIN/SERVFAIL even for working domains. Either a restart or wait for some time (cache?) will make the domains work again.

For ex, the long list of SERVFAILs here are false-negatives:
image

So while I don't have an exact count, some examples of TLDs that should work but don't:

❯ dig @127.0.0.1 -p 9592 abb +dnssec

; <<>> DiG 9.18.19 <<>> @127.0.0.1 -p 9592 abb +dnssec
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 32885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;abb.                           IN      A

;; Query time: 2220 msec
;; SERVER: 127.0.0.1#9592(127.0.0.1) (UDP)
;; WHEN: Mon Nov 27 22:22:57 IST 2023
;; MSG SIZE  rcvd: 32

❯ dig @1.1.1.1 nic.abb +dnssec

; <<>> DiG 9.18.19 <<>> @1.1.1.1 nic.abb +dnssec
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33053
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
;; QUESTION SECTION:
;nic.abb.                       IN      A

;; ANSWER SECTION:
nic.abb.                300     IN      A       138.224.0.118
nic.abb.                300     IN      RRSIG   A 8 2 300 20231211063301 20231127063301 37583 nic.abb. ZXrhU2XGq4mws44phZqEPBLKUb3dcNw3m/dahV4aSZ31TAgvlVxwLiIZ GtqnH5x0VGebHGwzAyzB7GPr0OIi6IykY8+zyMwegHAWmnZc1lf5xkmb FatJ91smr5G9mZyJFcOJ0qouBqlTVFx0R+qMV1dMlna7fPaj0JJJjXcO n1M=

;; Query time: 336 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Mon Nov 27 22:23:10 IST 2023
;; MSG SIZE  rcvd: 219

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants