[GH-ISSUE #3125] Recursor: queries for NS RRset return empty results #1138

New issue

Closed

opened 2026-03-16 01:42:42 +03:00 by kerem · 1 comment

kerem commented

2026-03-16 01:42:42 +03:00

Owner

Originally created by @divergentdave on GitHub (Jul 16, 2025).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/3125

I noticed that the recursor returns an empty RRset when queried for NS records. This only happens when DNSSEC validation is disabled. To reproduce, run the explore example, and then run dig @172.19.0.6 +rec NS testing. in the client container. The problem goes away when passing --dnssec to the example. This is probably happening because we are reusing a cached referral response instead of querying for the authoritative NS RRset, and enabling DNSSEC validation probably fixes it because the referral response lacks signatures, triggering another query. I suspect this is a regression following one of my recent recursor changes.

Originally created by @divergentdave on GitHub (Jul 16, 2025). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/3125 I noticed that the recursor returns an empty RRset when queried for NS records. This only happens when DNSSEC validation is disabled. To reproduce, run the `explore` example, and then run `dig @172.19.0.6 +rec NS testing.` in the client container. The problem goes away when passing `--dnssec` to the example. This is probably happening because we are reusing a cached referral response instead of querying for the authoritative NS RRset, and enabling DNSSEC validation probably fixes it because the referral response lacks signatures, triggering another query. I suspect this is a regression following one of my recent recursor changes.

kerem closed this issue

2026-03-16 01:42:47 +03:00

kerem commented

2026-03-16 01:42:53 +03:00

Author

Owner

@divergentdave commented on GitHub (Jul 17, 2025):

I confirmed that this regressed in PR #3043. This is related to #3008.

@divergentdave commented on GitHub (Jul 17, 2025): I confirmed that this regressed in PR #3043. This is related to #3008.

kerem referenced this issue

2026-03-16 04:24:35 +03:00

[PR #1143] [MERGED] Merge fix empty option at end of edns #2006

kerem referenced this issue

2026-03-16 04:41:22 +03:00

[PR #1143] [MERGED] Merge fix empty option at end of edns #2011