- Program: Authoritative
- Issue type: Feature request
Short description
When edns-cookies are in use on Auth server, please provide a parameter to set which RFC7873 option to use for the client-only cookie scenario. See https://www.rfc-editor.org/info/rfc7873/#section-5.2.3 and https://github.com/orgs/PowerDNS/discussions/16665
Usecase
Lessen the load of the client by default so that the initial contact with the auth-server is not requiring two requests (first to get a cookie and then a reply). Provide the option to choose the current behavior if a more aggressive approach during attacks or high load scenarios.
Description
Provide a parameter to auth-server so that the behavior in "option 3" in the RFC linked above can be selected if wanted. As I understand it, this means: the initial request with only a client-cookie gives a full reply with both the server-cookie and the requested DNS record. See also the comment from the maintainer in the PowerDNS discussion thread linked above.
Short description
When edns-cookies are in use on Auth server, please provide a parameter to set which RFC7873 option to use for the client-only cookie scenario. See https://www.rfc-editor.org/info/rfc7873/#section-5.2.3 and https://github.com/orgs/PowerDNS/discussions/16665
Usecase
Lessen the load of the client by default so that the initial contact with the auth-server is not requiring two requests (first to get a cookie and then a reply). Provide the option to choose the current behavior if a more aggressive approach during attacks or high load scenarios.
Description
Provide a parameter to auth-server so that the behavior in "option 3" in the RFC linked above can be selected if wanted. As I understand it, this means: the initial request with only a client-cookie gives a full reply with both the server-cookie and the requested DNS record. See also the comment from the maintainer in the PowerDNS discussion thread linked above.