[GH-ISSUE #83] Errors with processing of TTL records for NS RRs #345

New issue

Open

opened 2026-03-13 14:43:25 +03:00 by kerem · 0 comments

kerem commented

2026-03-13 14:43:25 +03:00

Owner

Originally created by @abligh on GitHub (Sep 7, 2015).
Original GitHub issue: https://github.com/abh/geodns/issues/83

geodns attempts to be helpful and avoids setting short TTLs (such as those typically used for A records) on NS records, and attempts to keep them above 86,400. There are two bugs here:

It is not possible to set TTL on an NS record below 86,400, even though there are good reasons to permit this.
TTL for NS records is not defaulting to the label TTL record, but was defaulting to the zone default TTL record (because it is added in AddLabel). So if the zone default TTL record is set to (e.g.) 5 seconds, (e.g. because apart from the 2 NS records at the apex, the zone consists solely of A records) the NS records would default to 5 seconds.

This can be illustrated by a simple dig NS example.com @127.0.0.1 on the default zonefiles, and seeing that a TTL of 600 is used (despite the attempt to keep them above 86,400), and that adding a TTL of 12,000 in to the NS records fails to remedy the situation.

Both issues are fixed by: https://github.com/abh/geodns/pull/82

Originally created by @abligh on GitHub (Sep 7, 2015). Original GitHub issue: https://github.com/abh/geodns/issues/83 geodns attempts to be helpful and avoids setting short TTLs (such as those typically used for A records) on `NS` records, and attempts to keep them above 86,400. There are two bugs here: - It is not possible to set TTL on an `NS` record below 86,400, even though there are good reasons to permit this. - TTL for `NS` records is not defaulting to the label TTL record, but was defaulting to the zone default TTL record (because it is added in `AddLabel`). So if the zone default TTL record is set to (e.g.) 5 seconds, (e.g. because apart from the 2 `NS` records at the apex, the zone consists solely of `A` records) the `NS` records would default to 5 seconds. This can be illustrated by a simple `dig NS example.com @127.0.0.1` on the default zonefiles, and seeing that a TTL of 600 is used (despite the attempt to keep them above 86,400), and that adding a TTL of 12,000 in to the NS records fails to remedy the situation. Both issues are fixed by: https://github.com/abh/geodns/pull/82