starred/hickory-dns
1
0
Fork 0
mirror of https://github.com/hickory-dns/hickory-dns.git synced 2026-04-25 03:05:51 +03:00
Code Issues 373 Projects Releases 6 Packages Wiki Activity

[GH-ISSUE #1277] client: AXFR not return all records #642

New issue
Closed
opened 2026-03-15 23:36:03 +03:00 by kerem · 9 comments
kerem commented 2026-03-15 23:36:03 +03:00
Owner
Copy link

Originally created by @visig9 on GitHub (Nov 9, 2020).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1277

Describe the bug
I'm try to use trust_dns_client in company internal network to fetch all records by AXFR request. But I found the returned records not the same as results of dig.

dig version (use example.com. to replace real domain):

$ dig -t axfr example.com. @172.20.1.5

; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t axfr example.com. @172.20.1.5
;; global options: +cmd

... omit ...

;; Query time: 49 msec
;; SERVER: 172.20.1.5#53(172.20.1.5)
;; WHEN: Mon Nov 09 09:57:12 CST 2020
;; XFR size: 660 records (messages 2, bytes 16795)

The trust-dns-client axfr-test program:

$ ./axfr-test
number of message in response: 1
number of record in response answer: 405

I notice the result of dig indicated it has 660 records + 2 messages, but in my sample code only has 405 records + 1 message. It maybe a bug?

To Reproduce

The code of axfr-test:

use std::net::{IpAddr, SocketAddr};
use trust_dns_client::{
    client::SyncClient,
    rr::{DNSClass, Name, Record, RecordType},
};

fn main() {
    // TODO: use real `nameserver` and `domain` in here
    let nameserver: IpAddr = [172, 20, 1, 5].into();
    let domain: Name = "example.com.".parse().unwrap();

    let records = query_axfr(nameserver, &domain);

    println!("number of record in response answer: {}", records.len());
}

fn query_axfr(nameserver: IpAddr, domain: &Name) -> Vec<Record> {
    let client = SyncClient::new(
        trust_dns_client::tcp::TcpClientConnection::new(SocketAddr::new(nameserver, 53))
            .expect("create tcp client connection failed"),
    );

    let response =
        trust_dns_client::client::Client::query(&client, domain, DNSClass::IN, RecordType::AXFR)
            .expect("DNS query failed");

    println!("number of message in response: {}", response.len());

    response
        .messages()
        .map(|msg| msg.answers())
        .flatten()
        .cloned()
        .collect()
}

Expected behavior
axfr-test should have the same results of dig.

System:

  • OS: ubuntu
  • Architecture: x86_64
  • Version 16.04
  • rustc version: 1.47.0

Version:
Crate: client
Version: 0.19.5

Additional context
N/A

Thanks help!

Originally created by @visig9 on GitHub (Nov 9, 2020). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1277 **Describe the bug** I'm try to use `trust_dns_client` in company internal network to fetch all records by AXFR request. But I found the returned records not the same as results of `dig`. `dig` version (use `example.com.` to replace real domain): ``` $ dig -t axfr example.com. @172.20.1.5 ; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t axfr example.com. @172.20.1.5 ;; global options: +cmd ... omit ... ;; Query time: 49 msec ;; SERVER: 172.20.1.5#53(172.20.1.5) ;; WHEN: Mon Nov 09 09:57:12 CST 2020 ;; XFR size: 660 records (messages 2, bytes 16795) ``` The `trust-dns-client` axfr-test program: ``` $ ./axfr-test number of message in response: 1 number of record in response answer: 405 ``` I notice the result of `dig` indicated it has 660 records + 2 messages, but in my sample code only has 405 records + 1 message. It maybe a bug? **To Reproduce** The code of `axfr-test`: ```rust use std::net::{IpAddr, SocketAddr}; use trust_dns_client::{ client::SyncClient, rr::{DNSClass, Name, Record, RecordType}, }; fn main() { // TODO: use real `nameserver` and `domain` in here let nameserver: IpAddr = [172, 20, 1, 5].into(); let domain: Name = "example.com.".parse().unwrap(); let records = query_axfr(nameserver, &domain); println!("number of record in response answer: {}", records.len()); } fn query_axfr(nameserver: IpAddr, domain: &Name) -> Vec<Record> { let client = SyncClient::new( trust_dns_client::tcp::TcpClientConnection::new(SocketAddr::new(nameserver, 53)) .expect("create tcp client connection failed"), ); let response = trust_dns_client::client::Client::query(&client, domain, DNSClass::IN, RecordType::AXFR) .expect("DNS query failed"); println!("number of message in response: {}", response.len()); response .messages() .map(|msg| msg.answers()) .flatten() .cloned() .collect() } ``` **Expected behavior** `axfr-test` should have the same results of `dig`. **System:** - OS: ubuntu - Architecture: x86_64 - Version 16.04 - rustc version: 1.47.0 **Version:** Crate: client Version: 0.19.5 **Additional context** N/A Thanks help!
kerem 2026-03-15 23:36:03 +03:00
kerem commented 2026-03-15 23:36:20 +03:00
Author
Owner
Copy link

@djc commented on GitHub (Nov 9, 2020):

Since we don't have access to your DNS server, could you look at the resulting records and give some samples of responses that are in dig's responses, but not in the trust-dns reponses? My initial hunch is that dig is allowing multiple messages while this might need some extra setup on the trust-dns side.

<!-- gh-comment-id:723908917 --> @djc commented on GitHub (Nov 9, 2020): Since we don't have access to your DNS server, could you look at the resulting records and give some samples of responses that are in dig's responses, but not in the trust-dns reponses? My initial hunch is that dig is allowing multiple messages while this might need some extra setup on the trust-dns side.
kerem commented 2026-03-15 23:36:25 +03:00
Author
Owner
Copy link

@visig9 commented on GitHub (Nov 10, 2020):

If don't care how data produced, just scroll to diff the two files section.

axfr-test rust source code

use std::net::{IpAddr, SocketAddr};
use trust_dns_client::{
    client::SyncClient,
    rr::{DNSClass, Name, Record, RecordType},
};

fn main() {
    let nameserver: IpAddr = [172, 20, 1, 5].into();
    let domain: Name = "***********.***.**.".parse().unwrap();
    let records = query_axfr(nameserver, &domain);

    println!("number of record in response answer: {}", records.len());

    // NEW: simulate dig output (without rdata part)
    for record in records.iter() {
        println!(
            "{}\t{}\t{}\t{}",
            record.name(),
            record.ttl(),
            record.dns_class(),
            record.rr_type(),
        );
    }
}

fn query_axfr(nameserver: IpAddr, domain: &Name) -> Vec<Record> {
    let client = SyncClient::new(
        trust_dns_client::tcp::TcpClientConnection::new(SocketAddr::new(nameserver, 53))
            .expect("create tcp client connection failed"),
    );

    let response =
        trust_dns_client::client::Client::query(&client, domain, DNSClass::IN, RecordType::AXFR)
            .expect("DNS query failed");

    println!("number of message in response: {}", response.len());

    response
        .messages()
        .map(|msg| msg.answers())
        .flatten()
        .cloned()
        .collect()
}

Get output

dig -t axfr ***********.***.**. @172.20.1.5 > axfr.txt
./axfr-test > axfr-test-result.txt

Then convert dig-result.txt to dig-result-modified.txt by remove data part from all line of records.

diff the two files

diff -u --ignore-space-change axfr-test-result.txt dig-result-modified.txt > diff.txt

diff.txt: (already mask some sensitive domain data)

--- axfr-test-result.txt	2020-11-10 09:47:58.000000000 +0800
+++ dig-result-modified.txt	2020-11-10 10:12:06.000000000 +0800
@@ -1,5 +1,6 @@
-number of message in response: 1
-number of record in response answer: 405
+
+; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t axfr
+;; global options: +cmd
 ***********.***.**.	300	IN	SOA
 ***********.***.**.	300	IN	MX
 ***********.***.**.	300	IN	NS
@@ -405,3 +406,263 @@
 oidc.***********.***.**.	300	IN	A
 oidc------.***********.***.**.	300	IN	A
 oms0-.***********.***.**.	300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms0-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms1-.***********.***.**. 300	IN	A
+oms2-.***********.***.**. 300	IN	A
+oms2-.***********.***.**. 300	IN	A
+oms2-.***********.***.**. 300	IN	A
+oms2-.***********.***.**. 300	IN	A
+oms2-.***********.***.**. 300	IN	A
+oms2-.***********.***.**. 300	IN	A
+oms9-.***********.***.**. 300	IN	A
+pda.***********.***.**.	300	IN	A
+plus.***********.***.**. 300	IN	NS
+plus.***********.***.**. 300	IN	NS
+plus.***********.***.**. 300	IN	NS
+plus.***********.***.**. 300	IN	NS
+plus-------.***********.***.**.	300 IN	A
+plus--------.***********.***.**. 300 IN	A
+plus----.***********.***.**. 300 IN	A
+plus----.***********.***.**. 300 IN	A
+plus---.***********.***.**. 300	IN	A
+plus---.***********.***.**. 300	IN	A
+pmm.***********.***.**.	300	IN	A
+port--.***********.***.**. 300	IN	A
+ppus-.***********.***.**. 300	IN	A
+prer-----.***********.***.**. 300 IN	NS
+prer-----.***********.***.**. 300 IN	NS
+prer-----.***********.***.**. 300 IN	NS
+prer-----.***********.***.**. 300 IN	NS
+pro.***********.***.**.	300	IN	NS
+pro.***********.***.**.	300	IN	NS
+pro.***********.***.**.	300	IN	NS
+pro.***********.***.**.	300	IN	NS
+prof---.***********.***.**. 300	IN	NS
+prof---.***********.***.**. 300	IN	NS
+prof---.***********.***.**. 300	IN	NS
+prof---.***********.***.**. 300	IN	NS
+prom--.***********.***.**. 300	IN	A
+prox------.***********.***.**. 300 IN	CNAME
+prox----------.***********.***.**. 300 IN A
+prox------.***********.***.**. 300 IN	CNAME
+prox----------.***********.***.**. 300 IN A
+prox----------.***********.***.**. 300 IN A
+prox------.***********.***.**. 300 IN	A
+prox----------.***********.***.**. 300 IN A
+prox------.***********.***.**. 300 IN	A
+prox--------.***********.***.**. 300 IN	A
+prox----------.***********.***.**. 300 IN A
+prox------.***********.***.**. 300 IN	A
+prox----------.***********.***.**. 300 IN A
+pvb.***********.***.**.	300	IN	A
+pvc.***********.***.**.	300	IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc----.***********.***.**. 300	IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc----.***********.***.**. 300	IN	A
+pxc------.***********.***.**. 300 IN	A
+pxc----.***********.***.**. 300	IN	A
+pxc------.***********.***.**. 300 IN	A
+pxcl-.***********.***.**. 300	IN	A
+pxcl---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	A
+rdb0---.***********.***.**. 300	IN	CNAME
+rdb1---.***********.***.**. 300	IN	A
+rdb1---.***********.***.**. 300	IN	A
+rdb1---.***********.***.**. 300	IN	A
+rdb1---.***********.***.**. 300	IN	A
+rdb1-.***********.***.**. 300	IN	A
+rdb1---.***********.***.**. 300	IN	A
+rdb1---.***********.***.**. 300	IN	CNAME
+rds---.***********.***.**. 300	IN	A
+resu---------.***********.***.**. 300 IN NS
+resu---------.***********.***.**. 300 IN NS
+resu---------.***********.***.**. 300 IN NS
+resu---------.***********.***.**. 300 IN NS
+revi---.***********.***.**. 300	IN	NS
+revi---.***********.***.**. 300	IN	NS
+revi---.***********.***.**. 300	IN	NS
+revi---.***********.***.**. 300	IN	NS
+rund---.***********.***.**. 300	IN	A
+scre-.***********.***.**. 300	IN	A
+sear--.***********.***.**. 300	IN	A
+sear----.***********.***.**. 300 IN	A
+seni--.***********.***.**. 300	IN	NS
+seni--.***********.***.**. 300	IN	NS
+seni--.***********.***.**. 300	IN	NS
+seni--.***********.***.**. 300	IN	NS
+serv---.***********.***.**. 300	IN	A
+sh90.***********.***.**. 300	IN	A
+sh90--.***********.***.**. 300	IN	CNAME
+sh90--.***********.***.**. 300	IN	A
+sh90--.***********.***.**. 300	IN	CNAME
+sign--.***********.***.**. 300	IN	A
+sms.***********.***.**.	300	IN	A
+smsd-.***********.***.**. 300	IN	A
+smsd---.***********.***.**. 300	IN	CNAME
+smsd---.***********.***.**. 300	IN	A
+smsd---.***********.***.**. 300	IN	CNAME
+smsw-.***********.***.**. 300	IN	A
+sn01.***********.***.**. 300	IN	A
+sn01--.***********.***.**. 300	IN	CNAME
+sn01--.***********.***.**. 300	IN	A
+sn01--.***********.***.**. 300	IN	CNAME
+sn02.***********.***.**. 300	IN	A
+sn02--.***********.***.**. 300	IN	CNAME
+sn02--.***********.***.**. 300	IN	A
+sn02--.***********.***.**. 300	IN	CNAME
+sn03.***********.***.**. 300	IN	A
+sn03--.***********.***.**. 300	IN	CNAME
+sn03--.***********.***.**. 300	IN	A
+sn03--.***********.***.**. 300	IN	CNAME
+sn04.***********.***.**. 300	IN	A
+sn04--.***********.***.**. 300	IN	CNAME
+sn04--.***********.***.**. 300	IN	A
+sn04--.***********.***.**. 300	IN	CNAME
+sn05.***********.***.**. 300	IN	A
+sn05--.***********.***.**. 300	IN	CNAME
+sn05--.***********.***.**. 300	IN	A
+sn05--.***********.***.**. 300	IN	CNAME
+sn06.***********.***.**. 300	IN	A
+sn06--.***********.***.**. 300	IN	CNAME
+sn06--.***********.***.**. 300	IN	A
+sn06--.***********.***.**. 300	IN	CNAME
+sn07.***********.***.**. 300	IN	A
+sn07--.***********.***.**. 300	IN	CNAME
+sn07--.***********.***.**. 300	IN	A
+sn07--.***********.***.**. 300	IN	CNAME
+sn08.***********.***.**. 300	IN	A
+sn08--.***********.***.**. 300	IN	CNAME
+sn08--.***********.***.**. 300	IN	A
+sn08--.***********.***.**. 300	IN	CNAME
+sn09.***********.***.**. 300	IN	A
+sn09--.***********.***.**. 300	IN	CNAME
+sn09--.***********.***.**. 300	IN	A
+sn09--.***********.***.**. 300	IN	CNAME
+sn10.***********.***.**. 300	IN	A
+sn10--.***********.***.**. 300	IN	CNAME
+sn10--.***********.***.**. 300	IN	A
+sn10--.***********.***.**. 300	IN	CNAME
+sp90.***********.***.**. 300	IN	A
+sp90--.***********.***.**. 300	IN	CNAME
+sp90--.***********.***.**. 300	IN	A
+sp90--.***********.***.**. 300	IN	CNAME
+spid------.***********.***.**. 300 IN	A
+spid-----------.***********.***.**. 300	IN CNAME
+spid-----------.***********.***.**. 300	IN CNAME
+spid------.***********.***.**. 300 IN	A
+spid------.***********.***.**. 300 IN	A
+spid------.***********.***.**. 300 IN	A
+spro--.***********.***.**. 300	IN	A
+sso.***********.***.**.	300	IN	A
+star.***********.***.**. 300	IN	NS
+star.***********.***.**. 300	IN	NS
+star.***********.***.**. 300	IN	NS
+star.***********.***.**. 300	IN	NS
+stat--.***********.***.**. 300	IN	A
+stud---.***********.***.**. 300	IN	NS
+stud---.***********.***.**. 300	IN	NS
+stud---.***********.***.**. 300	IN	NS
+stud---.***********.***.**. 300	IN	NS
+sysb---.***********.***.**. 300	IN	A
+take---.***********.***.**. 300	IN	A
+take-----.***********.***.**. 300 IN	CNAME
+take-----.***********.***.**. 300 IN	A
+take-----.***********.***.**. 300 IN	CNAME
+tale--.***********.***.**. 300	IN	NS
+tale--.***********.***.**. 300	IN	NS
+tale--.***********.***.**. 300	IN	NS
+tale--.***********.***.**. 300	IN	NS
+time-----.***********.***.**. 300 IN	NS
+time-----.***********.***.**. 300 IN	NS
+time-----.***********.***.**. 300 IN	NS
+time-----.***********.***.**. 300 IN	NS
+top.***********.***.**.	300	IN	NS
+top.***********.***.**.	300	IN	NS
+top.***********.***.**.	300	IN	NS
+top.***********.***.**.	300	IN	NS
+tpro--.***********.***.**. 300	IN	CNAME
+tuto-.***********.***.**. 300	IN	A
+m.tutor.***********.***.**. 300	IN	A
+tuto----.***********.***.**. 300 IN	A
+_ccf-----------------------------.developers.***********.***.**.***********.***.**. 300	IN CNAME
+uts.***********.***.**.	300	IN	A
+va.***********.***.**.	300	IN	A
+vip.***********.***.**.	300	IN	A
+auth.vip.***********.***.**. 300 IN	NS
+auth.vip.***********.***.**. 300 IN	NS
+auth.vip.***********.***.**. 300 IN	NS
+auth.vip.***********.***.**. 300 IN	NS
+vip3.***********.***.**. 300	IN	NS
+vip3.***********.***.**. 300	IN	NS
+vip3.***********.***.**. 300	IN	NS
+vip3.***********.***.**. 300	IN	NS
+vipa--.***********.***.**. 300	IN	A
+vipa----.***********.***.**. 300 IN	A
+vipg-.***********.***.**. 300	IN	A
+vipm-.***********.***.**. 300	IN	A
+vipm---.***********.***.**. 300	IN	CNAME
+vipm---.***********.***.**. 300	IN	A
+vipm---.***********.***.**. 300	IN	CNAME
+wage.***********.***.**. 300	IN	A
+wage---.***********.***.**. 300	IN	A
+webs-.***********.***.**. 300	IN	A
+wei.***********.***.**.	300	IN	A
+wish.***********.***.**. 300	IN	A
+wow.***********.***.**.	300	IN	A
+wowa--.***********.***.**. 300	IN	A
+ws-1-----.***********.***.**. 300 IN	A
+ws-j-.***********.***.**. 300	IN	A
+ws-m----.***********.***.**. 300 IN	A
+ws-n--.***********.***.**. 300	IN	CNAME
+wsm.***********.***.**.	300	IN	A
+wsp---.***********.***.**. 300	IN	A
+wsp-----.***********.***.**. 300 IN	A
+wsp-----.***********.***.**. 300 IN	A
+wsp------.***********.***.**. 300 IN	A
+wsp----.***********.***.**. 300	IN	A
+www.***********.***.**.	300	IN	A
+yout-.***********.***.**. 300	IN	NS
+yout-.***********.***.**. 300	IN	NS
+yout-.***********.***.**. 300	IN	NS
+yout-.***********.***.**. 300	IN	NS
+***********.***.**.	300	IN	SOA
+;; Query time: 5
+;; SERVER: 172.20.1.5#53(172.20.1.5)
+;; WHEN: Tue Nov 10 09:13:26 CST
+;; XFR size: 660 records (messages 2, bytes 16795)
+

Look like AXFR answers already sorted by alphabet order. And it lost all domain names after some point of the whole list.

<!-- gh-comment-id:724419550 --> @visig9 commented on GitHub (Nov 10, 2020): If don't care how data produced, just scroll to `diff the two files` section. ## `axfr-test` rust source code ```rust use std::net::{IpAddr, SocketAddr}; use trust_dns_client::{ client::SyncClient, rr::{DNSClass, Name, Record, RecordType}, }; fn main() { let nameserver: IpAddr = [172, 20, 1, 5].into(); let domain: Name = "***********.***.**.".parse().unwrap(); let records = query_axfr(nameserver, &domain); println!("number of record in response answer: {}", records.len()); // NEW: simulate dig output (without rdata part) for record in records.iter() { println!( "{}\t{}\t{}\t{}", record.name(), record.ttl(), record.dns_class(), record.rr_type(), ); } } fn query_axfr(nameserver: IpAddr, domain: &Name) -> Vec<Record> { let client = SyncClient::new( trust_dns_client::tcp::TcpClientConnection::new(SocketAddr::new(nameserver, 53)) .expect("create tcp client connection failed"), ); let response = trust_dns_client::client::Client::query(&client, domain, DNSClass::IN, RecordType::AXFR) .expect("DNS query failed"); println!("number of message in response: {}", response.len()); response .messages() .map(|msg| msg.answers()) .flatten() .cloned() .collect() } ``` ## Get output ```sh dig -t axfr ***********.***.**. @172.20.1.5 > axfr.txt ./axfr-test > axfr-test-result.txt ``` Then convert `dig-result.txt` to `dig-result-modified.txt` by remove data part from all line of records. ## diff the two files ```sh diff -u --ignore-space-change axfr-test-result.txt dig-result-modified.txt > diff.txt ``` `diff.txt`: (already mask some sensitive domain data) ```diff --- axfr-test-result.txt 2020-11-10 09:47:58.000000000 +0800 +++ dig-result-modified.txt 2020-11-10 10:12:06.000000000 +0800 @@ -1,5 +1,6 @@ -number of message in response: 1 -number of record in response answer: 405 + +; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t axfr +;; global options: +cmd ***********.***.**. 300 IN SOA ***********.***.**. 300 IN MX ***********.***.**. 300 IN NS @@ -405,3 +406,263 @@ oidc.***********.***.**. 300 IN A oidc------.***********.***.**. 300 IN A oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms0-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms1-.***********.***.**. 300 IN A +oms2-.***********.***.**. 300 IN A +oms2-.***********.***.**. 300 IN A +oms2-.***********.***.**. 300 IN A +oms2-.***********.***.**. 300 IN A +oms2-.***********.***.**. 300 IN A +oms2-.***********.***.**. 300 IN A +oms9-.***********.***.**. 300 IN A +pda.***********.***.**. 300 IN A +plus.***********.***.**. 300 IN NS +plus.***********.***.**. 300 IN NS +plus.***********.***.**. 300 IN NS +plus.***********.***.**. 300 IN NS +plus-------.***********.***.**. 300 IN A +plus--------.***********.***.**. 300 IN A +plus----.***********.***.**. 300 IN A +plus----.***********.***.**. 300 IN A +plus---.***********.***.**. 300 IN A +plus---.***********.***.**. 300 IN A +pmm.***********.***.**. 300 IN A +port--.***********.***.**. 300 IN A +ppus-.***********.***.**. 300 IN A +prer-----.***********.***.**. 300 IN NS +prer-----.***********.***.**. 300 IN NS +prer-----.***********.***.**. 300 IN NS +prer-----.***********.***.**. 300 IN NS +pro.***********.***.**. 300 IN NS +pro.***********.***.**. 300 IN NS +pro.***********.***.**. 300 IN NS +pro.***********.***.**. 300 IN NS +prof---.***********.***.**. 300 IN NS +prof---.***********.***.**. 300 IN NS +prof---.***********.***.**. 300 IN NS +prof---.***********.***.**. 300 IN NS +prom--.***********.***.**. 300 IN A +prox------.***********.***.**. 300 IN CNAME +prox----------.***********.***.**. 300 IN A +prox------.***********.***.**. 300 IN CNAME +prox----------.***********.***.**. 300 IN A +prox----------.***********.***.**. 300 IN A +prox------.***********.***.**. 300 IN A +prox----------.***********.***.**. 300 IN A +prox------.***********.***.**. 300 IN A +prox--------.***********.***.**. 300 IN A +prox----------.***********.***.**. 300 IN A +prox------.***********.***.**. 300 IN A +prox----------.***********.***.**. 300 IN A +pvb.***********.***.**. 300 IN A +pvc.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc----.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc----.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxc----.***********.***.**. 300 IN A +pxc------.***********.***.**. 300 IN A +pxcl-.***********.***.**. 300 IN A +pxcl---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN A +rdb0---.***********.***.**. 300 IN CNAME +rdb1---.***********.***.**. 300 IN A +rdb1---.***********.***.**. 300 IN A +rdb1---.***********.***.**. 300 IN A +rdb1---.***********.***.**. 300 IN A +rdb1-.***********.***.**. 300 IN A +rdb1---.***********.***.**. 300 IN A +rdb1---.***********.***.**. 300 IN CNAME +rds---.***********.***.**. 300 IN A +resu---------.***********.***.**. 300 IN NS +resu---------.***********.***.**. 300 IN NS +resu---------.***********.***.**. 300 IN NS +resu---------.***********.***.**. 300 IN NS +revi---.***********.***.**. 300 IN NS +revi---.***********.***.**. 300 IN NS +revi---.***********.***.**. 300 IN NS +revi---.***********.***.**. 300 IN NS +rund---.***********.***.**. 300 IN A +scre-.***********.***.**. 300 IN A +sear--.***********.***.**. 300 IN A +sear----.***********.***.**. 300 IN A +seni--.***********.***.**. 300 IN NS +seni--.***********.***.**. 300 IN NS +seni--.***********.***.**. 300 IN NS +seni--.***********.***.**. 300 IN NS +serv---.***********.***.**. 300 IN A +sh90.***********.***.**. 300 IN A +sh90--.***********.***.**. 300 IN CNAME +sh90--.***********.***.**. 300 IN A +sh90--.***********.***.**. 300 IN CNAME +sign--.***********.***.**. 300 IN A +sms.***********.***.**. 300 IN A +smsd-.***********.***.**. 300 IN A +smsd---.***********.***.**. 300 IN CNAME +smsd---.***********.***.**. 300 IN A +smsd---.***********.***.**. 300 IN CNAME +smsw-.***********.***.**. 300 IN A +sn01.***********.***.**. 300 IN A +sn01--.***********.***.**. 300 IN CNAME +sn01--.***********.***.**. 300 IN A +sn01--.***********.***.**. 300 IN CNAME +sn02.***********.***.**. 300 IN A +sn02--.***********.***.**. 300 IN CNAME +sn02--.***********.***.**. 300 IN A +sn02--.***********.***.**. 300 IN CNAME +sn03.***********.***.**. 300 IN A +sn03--.***********.***.**. 300 IN CNAME +sn03--.***********.***.**. 300 IN A +sn03--.***********.***.**. 300 IN CNAME +sn04.***********.***.**. 300 IN A +sn04--.***********.***.**. 300 IN CNAME +sn04--.***********.***.**. 300 IN A +sn04--.***********.***.**. 300 IN CNAME +sn05.***********.***.**. 300 IN A +sn05--.***********.***.**. 300 IN CNAME +sn05--.***********.***.**. 300 IN A +sn05--.***********.***.**. 300 IN CNAME +sn06.***********.***.**. 300 IN A +sn06--.***********.***.**. 300 IN CNAME +sn06--.***********.***.**. 300 IN A +sn06--.***********.***.**. 300 IN CNAME +sn07.***********.***.**. 300 IN A +sn07--.***********.***.**. 300 IN CNAME +sn07--.***********.***.**. 300 IN A +sn07--.***********.***.**. 300 IN CNAME +sn08.***********.***.**. 300 IN A +sn08--.***********.***.**. 300 IN CNAME +sn08--.***********.***.**. 300 IN A +sn08--.***********.***.**. 300 IN CNAME +sn09.***********.***.**. 300 IN A +sn09--.***********.***.**. 300 IN CNAME +sn09--.***********.***.**. 300 IN A +sn09--.***********.***.**. 300 IN CNAME +sn10.***********.***.**. 300 IN A +sn10--.***********.***.**. 300 IN CNAME +sn10--.***********.***.**. 300 IN A +sn10--.***********.***.**. 300 IN CNAME +sp90.***********.***.**. 300 IN A +sp90--.***********.***.**. 300 IN CNAME +sp90--.***********.***.**. 300 IN A +sp90--.***********.***.**. 300 IN CNAME +spid------.***********.***.**. 300 IN A +spid-----------.***********.***.**. 300 IN CNAME +spid-----------.***********.***.**. 300 IN CNAME +spid------.***********.***.**. 300 IN A +spid------.***********.***.**. 300 IN A +spid------.***********.***.**. 300 IN A +spro--.***********.***.**. 300 IN A +sso.***********.***.**. 300 IN A +star.***********.***.**. 300 IN NS +star.***********.***.**. 300 IN NS +star.***********.***.**. 300 IN NS +star.***********.***.**. 300 IN NS +stat--.***********.***.**. 300 IN A +stud---.***********.***.**. 300 IN NS +stud---.***********.***.**. 300 IN NS +stud---.***********.***.**. 300 IN NS +stud---.***********.***.**. 300 IN NS +sysb---.***********.***.**. 300 IN A +take---.***********.***.**. 300 IN A +take-----.***********.***.**. 300 IN CNAME +take-----.***********.***.**. 300 IN A +take-----.***********.***.**. 300 IN CNAME +tale--.***********.***.**. 300 IN NS +tale--.***********.***.**. 300 IN NS +tale--.***********.***.**. 300 IN NS +tale--.***********.***.**. 300 IN NS +time-----.***********.***.**. 300 IN NS +time-----.***********.***.**. 300 IN NS +time-----.***********.***.**. 300 IN NS +time-----.***********.***.**. 300 IN NS +top.***********.***.**. 300 IN NS +top.***********.***.**. 300 IN NS +top.***********.***.**. 300 IN NS +top.***********.***.**. 300 IN NS +tpro--.***********.***.**. 300 IN CNAME +tuto-.***********.***.**. 300 IN A +m.tutor.***********.***.**. 300 IN A +tuto----.***********.***.**. 300 IN A +_ccf-----------------------------.developers.***********.***.**.***********.***.**. 300 IN CNAME +uts.***********.***.**. 300 IN A +va.***********.***.**. 300 IN A +vip.***********.***.**. 300 IN A +auth.vip.***********.***.**. 300 IN NS +auth.vip.***********.***.**. 300 IN NS +auth.vip.***********.***.**. 300 IN NS +auth.vip.***********.***.**. 300 IN NS +vip3.***********.***.**. 300 IN NS +vip3.***********.***.**. 300 IN NS +vip3.***********.***.**. 300 IN NS +vip3.***********.***.**. 300 IN NS +vipa--.***********.***.**. 300 IN A +vipa----.***********.***.**. 300 IN A +vipg-.***********.***.**. 300 IN A +vipm-.***********.***.**. 300 IN A +vipm---.***********.***.**. 300 IN CNAME +vipm---.***********.***.**. 300 IN A +vipm---.***********.***.**. 300 IN CNAME +wage.***********.***.**. 300 IN A +wage---.***********.***.**. 300 IN A +webs-.***********.***.**. 300 IN A +wei.***********.***.**. 300 IN A +wish.***********.***.**. 300 IN A +wow.***********.***.**. 300 IN A +wowa--.***********.***.**. 300 IN A +ws-1-----.***********.***.**. 300 IN A +ws-j-.***********.***.**. 300 IN A +ws-m----.***********.***.**. 300 IN A +ws-n--.***********.***.**. 300 IN CNAME +wsm.***********.***.**. 300 IN A +wsp---.***********.***.**. 300 IN A +wsp-----.***********.***.**. 300 IN A +wsp-----.***********.***.**. 300 IN A +wsp------.***********.***.**. 300 IN A +wsp----.***********.***.**. 300 IN A +www.***********.***.**. 300 IN A +yout-.***********.***.**. 300 IN NS +yout-.***********.***.**. 300 IN NS +yout-.***********.***.**. 300 IN NS +yout-.***********.***.**. 300 IN NS +***********.***.**. 300 IN SOA +;; Query time: 5 +;; SERVER: 172.20.1.5#53(172.20.1.5) +;; WHEN: Tue Nov 10 09:13:26 CST +;; XFR size: 660 records (messages 2, bytes 16795) + ``` Look like AXFR answers already sorted by alphabet order. And it lost all domain names after some point of the whole list.
kerem commented 2026-03-15 23:36:30 +03:00
Author
Owner
Copy link

@djc commented on GitHub (Nov 10, 2020):

So it looks like that would indeed be due to not properly reading the second message.

<!-- gh-comment-id:724699040 --> @djc commented on GitHub (Nov 10, 2020): So it looks like that would indeed be due to not properly reading the second message.
kerem commented 2026-03-15 23:36:35 +03:00
Author
Owner
Copy link

@bluejekyll commented on GitHub (Nov 10, 2020):

It's entirely possible that we have a bug with AXFR. We may not be holding the client stream open for more than a single message. There is an existing bug for this in fact. I just haven't had time to consider how we'll fix this, as I think it means switching into a different mode for AXFR. Though, the async interface probably should change, and in fact, the way we process mDNS has similar issues, as well as Happy Eye Balls (ipv4 and ipv6 lookup). We should probably be returning an async Stream interface to read all the messages in the AXFR case (and the others). It may mean a refactor of a bunch of inner components.

See similar discussion here: #351 (edit: this is the server side, rather than the client, but similar issue, i.e. only a single message is being used for AXFR responses)

<!-- gh-comment-id:724804970 --> @bluejekyll commented on GitHub (Nov 10, 2020): It's entirely possible that we have a bug with AXFR. We may not be holding the client stream open for more than a single message. There is an existing bug for this in fact. I just haven't had time to consider how we'll fix this, as I think it means switching into a different mode for AXFR. Though, the async interface probably should change, and in fact, the way we process mDNS has similar issues, as well as Happy Eye Balls (ipv4 and ipv6 lookup). We should probably be returning an async Stream interface to read all the messages in the AXFR case (and the others). It may mean a refactor of a bunch of inner components. See similar discussion here: #351 (edit: this is the server side, rather than the client, but similar issue, i.e. only a single message is being used for AXFR responses)
kerem commented 2026-03-15 23:36:40 +03:00
Author
Owner
Copy link

@trinity-1686a commented on GitHub (May 22, 2021):

this should be fixed by #1478

<!-- gh-comment-id:846471470 --> @trinity-1686a commented on GitHub (May 22, 2021): this should be fixed by #1478
kerem commented 2026-03-15 23:36:45 +03:00
Author
Owner
Copy link

@csarn commented on GitHub (Jul 22, 2022):

I'm not sure if this ever was fixed, but currently (trust-dns-client 0.21.2) the problem still exists.
A DnsResponse to an AXFR query only contains roughly 550 records, probably depending on size of each record. This seems to be the content of only one Message, even if the server responds with multiple Messages.

Is there a way get all records since #1478 ?

While I came across this problem during stress-testing, I actually planned on using trust-dns-client AXFR for a live zone that exceeds a single message for transfer. This is not a large zone, but DNSSEC adds a lot of records (and quite large ones).

<!-- gh-comment-id:1192900372 --> @csarn commented on GitHub (Jul 22, 2022): I'm not sure if this ever was fixed, but currently (trust-dns-client 0.21.2) the problem still exists. A DnsResponse to an AXFR query only contains roughly 550 records, probably depending on size of each record. This seems to be the content of only one Message, even if the server responds with multiple Messages. Is there a way get all records since #1478 ? While I came across this problem during stress-testing, I actually planned on using trust-dns-client AXFR for a live zone that exceeds a single message for transfer. This is not a large zone, but DNSSEC adds a lot of records (and quite large ones).
kerem commented 2026-03-15 23:36:50 +03:00
Author
Owner
Copy link

@trinity-1686a commented on GitHub (Jul 23, 2022):

Instead of Client::query, you should use Client::zone_transfer, and hopefully it will work.

<!-- gh-comment-id:1193015767 --> @trinity-1686a commented on GitHub (Jul 23, 2022): Instead of [`Client::query`](https://docs.rs/trust-dns-client/latest/trust_dns_client/client/trait.ClientHandle.html#method.query), you should use [`Client::zone_transfer`](https://docs.rs/trust-dns-client/latest/trust_dns_client/client/trait.ClientHandle.html#method.zone_transfer), and hopefully it will work.
kerem commented 2026-03-15 23:36:55 +03:00
Author
Owner
Copy link

@csarn commented on GitHub (Jul 23, 2022):

Thanks, it does indeed work!

<!-- gh-comment-id:1193102094 --> @csarn commented on GitHub (Jul 23, 2022): Thanks, it does indeed work!
kerem commented 2026-03-15 23:37:00 +03:00
Author
Owner
Copy link

@bluejekyll commented on GitHub (Jul 23, 2022):

Closing this with the above answer. And thank you for following up @trinity-1686a !

<!-- gh-comment-id:1193120381 --> @bluejekyll commented on GitHub (Jul 23, 2022): Closing this with the above answer. And thank you for following up @trinity-1686a !
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
david/conformance-dnssec-negative-tests
prepare-0.26.1
release/0.26
query-api
opt-types
cname-nsec
no-cname-recursion
conformance-min-ttl
dname-base
drop-message-request
no-error-queries
cpu-sig0-rm-message-sig_dev
cpu-tsig-test-update_dev
windows-config
dnssec-net
release/0.25
opp-enc-persist
integration-test
cpu-tidying-recursor-opts_dev
happy-eyeballs
david/authoritative-zone-storage-trait
dnssec-ad
no-authority
release/0.24
pvdrz/remove-top-file
pvdrz/h3-handshake-timeout
pvdrz/quic-handshake-timeout
nxdomain-for-recursor
ja-test-merque-queue
ja-fix-ci-again
sz-add-ede-tests
sz-test-tc-bit-with-large-response
sz-fix-tokio-dependency
gh-2275-test-rrsig-signature
refactor-sign-zone-file
fix-1.79-cleanliness
update-nightly-hash
release/0.23
gh-pages
use-just-for-server-toml
release/0.22
revert-1874-cpu-zone-parse-default-class
disable-bind-compatibility-tests
disable-test_tls_client_stream_ipv4
update-native-tls-0.2.11
recursor-tests
fix-clippy-self
release/0.20
saethlin-fix-rdata-zero
release/0.19
flat_name
drop_unused_futures
release/0.18
release-r0.12-cs0.17
release/r0.12-cs0.17
trust-dns-book
r0.10
test-connections-not-dropped
fix_exec_status_on_rs_files
release-0.9
add-mutex-to-integration-tests
0.8_release
bfry/dns-crypt
v0.26.0
v0.26.0-beta.4
v0.26.0-beta.3
v0.26.0-beta.2
v0.26.0-beta.1
v0.26.0-alpha.1
v0.25.2
v0.25.1
v0.25.0
v0.24.4
v0.24.3
v0.25.0-alpha.5
v0.24.2
v0.25.0-alpha.4
v0.25.0-alpha.3
v0.25.0-alpha.2
v0.25.0-alpha.1
v0.24.1
v0.23.2
v0.24.0
v0.23.1
v0.23.0
v0.23.0-alpha.5
v0.23.0-alpha.4
v0.23.0-alpha.3
v0.22.1
v0.23.0-alpha.2
v0.23.0-alpha.1
v0.22.0
v0.21.2
v0.21.1
v0.21.0
v0.21.0-alpha.5
v0.20.4
v0.21.0-alpha.4
v0.21.0-alpha.3
v0.21.0-alpha.2
v0.21.0-alpha.1
v0.20.3
v0.20.2
v0.20.1
v0.19.7
v0.20.0
0.19.6
v0.20.0-alpha.3
v0.20.0-alpha.2
v0.20.0-alpha.1
0.19.5
0.19.4
0.19.3
0.19.0
0.18.1
0.18
0.18.0.alpha.2
r0.12_cs0.17
r0.11.1
cs0.16.1
r0.11
cs0.16
r0.10.1
r0.10.0
cs0.15.0
r0.9.1
v0.14.0
r0.9.0
r0.8.1
r0.8.0
v0.13.0
r0.7.0
c0.12.0
r0.6.0
r0.5.0
resolver.0.4.0
0.11.0
0.10.5
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.3
0.9.2
0.9.1
0.9.0
0.8.1
0.8.0
0.7.3
0.7.2
0.7.1
0.7.0
0.6.0
0.5.3
0.5.1
0.5.0
0.4.0
0.3.1
0.3.0
0.2.1
0.2.0
0.1.0
Labels
Clear labels   
blocked

   
breaking-change

   
bug

   
bug:critical

   
bug:tests

   
cleanup

   
compliance

   
compliance

   
compliance

   
crate:all

   
crate:client

   
crate:native-tls

   
crate:proto

   
crate:recursor

   
crate:resolver

   
crate:resolver

   
crate:rustls

   
crate:server

   
crate:util

   
dependencies

   
docs

   
duplicate

   
easy

   
easy

   
enhance

   
enhance

   
enhance

   
feature:dns-over-https

   
feature:dns-over-quic

   
feature:dns-over-tls

   
feature:dnsssec

   
feature:global_lb

   
feature:mdns

   
feature:tsig

   
features:edns

   
has workaround

   
ops

   
perf

   
platform:WASM

   
platform:android

   
platform:fuchsia

   
platform:linux

   
platform:macos

   
platform:windows

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
test

   
tools

   
tools

   
trust

   
unclear

   
wontfix
No labels
blocked
breaking-change
bug
bug:critical
bug:tests
cleanup
compliance
compliance
compliance
crate:all
crate:client
crate:native-tls
crate:proto
crate:recursor
crate:resolver
crate:resolver
crate:rustls
crate:server
crate:util
dependencies
docs
duplicate
easy
easy
enhance
enhance
enhance
feature:dns-over-https
feature:dns-over-quic
feature:dns-over-tls
feature:dnsssec
feature:global_lb
feature:mdns
feature:tsig
features:edns
has workaround
ops
perf
platform:WASM
platform:android
platform:fuchsia
platform:linux
platform:macos
platform:windows
pull-request
question
test
tools
tools
trust
unclear
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hickory-dns#642
No description provided.