NAME

        SV_RFC1995_2_IXFR_client - an IXFR client sends an IXFR message

VERIFICATION POINTS

        Verify that a NUT sends an IXFR message to get a new information about zone.

If an IXFR client, which likely has an older version of a zone,

thinks it needs new information about the zone through SOA refresh timeout,

it sends an IXFR message containing the SOA serial number of its, presumably
outdated, copy of the zone.
The query type value of IXFR assigned by IANA is 251.
The IXFR query packet format is the same as that of a normal DNS
query, but with the query type being IXFR and the authority section
containing the SOA record of client's version of the zone.
Transport of a query may be by either UDP or TCP.
A client should first make an IXFR query using UDP.

TARGET

        Server (an IXFR client)

SYNOPSIS

	SV_RFC1995_2_IXFR_client.seq [-tooloption ...]: KOI tool option
	See also DNSConfig.pm

INITIALIZATION

Network Topology

                   |
                   |                     sec.example.com domain
                 Router (TN)             DNS Server7
                   |3ffe:501:ffff:100::1   |3ffe:501:ffff:100::31
                   |192.168.0.1            |192.168.0.31
                   |                       |
                   |                       |
Net-z   --+--------+---------------+-------+------------------- 3ffe:501:ffff:100::/64
          |                        |                            192.168.0/24
          |                        |
        DNS Server1 (NUT)         DNS Client1 (TN)
           3ffe:501:ffff:100::10    3ffe:501:ffff:100::20
           192.168.0.10             192.168.0.20
	

	

Setup



Set the DNS Server1's (NUT) address as above mentioned Network Topology.

Configure the Server1's: (NUT)
zone file to response query from TN.


configuration file as slave server about sec.example.com zone.


Enable incremental zone transfer function.



Example of DNS server configuration on DNS Server1 (NUT):

	
For IPv4 transport
zone "sec.example.com" {
	type slave;
	masters {192.168.0.31;};
	file "s/sec.example.com";
};
	
For IPv6 transport
zone "sec.example.com" {
	type slave;
	masters {3ffe:501:ffff:100::31;};
	file "s/sec.example.com";
};
	

Transferred sec.example.com zone information:


$TTL    86400	; TTL of 1 day
@ IN SOA NS7.sec.example.com. root.sec.example.com. (
	1	; serial
	180	; refresh every 3 min
	30	; retry every 30 sec
	360	; expire after 6 min
	30	; Minimum TTL of 30 sec
)
;
	IN	NS	NS7.sec.example.com.
	IN	NS	NS1.sec.example.com.
	IN	MX	10	NS7
NS7	IN	A	192.168.0.31
	IN	AAAA	3ffe:501:ffff:100::31
NS1	IN	A	192.168.0.10
	IN	AAAA	3ffe:501:ffff:100::10
;
CL1	IN	A	192.168.0.20
CL2	IN	A	192.168.0.21
	

PRE-TEST SEQUENCE

        After all zone information are transferred between primary DNS server7 (TN) 
        and slave DNS server1 (NUT), following pre-test sequence is performed.

    DNS Client1 (TN)             DNS Server1 (NUT)              DNS Server7 (TN)
        |                              |                              |
        |----------------------------->|                              |
        | 1. Send standard query       |                              |
        |  RD = 0                      |                              |
        |  QNAME = CL2.sec.example.com |                              |
        |  QTYPE = A                   |                              |
        |                              |                              |
        |<-----------------------------|                              |
        | 2. Standard query response   |                              |
        |  AA = 0                      |                              |
        |  RD = 0                      |                              |
        |  QNAME = CL2.sec.example.com |                              |
        |  QTYPE = A                   |                              |
        |  ANSWER Name                 |                              |
        |        = CL2.sec.example.com |                              |
        |  ANSWER Type                 |                              |
        |        = A (0x0001)          |                              |
        |  ANSWER Address              |                              |
        |        = 192.168.0.21        |                              |
        |                              |                              |
        v                              v                              v

TEST PROCEDURE

        This test sequence is following.
        NOTE: SOA's parameter and TTL are same as above sec.example.com zone information.
              TN includes NS7 and NS1.sub.example.com into Authority as type = NS.
              Also TN includes NS7 and NS1.sub.example.com address into Additional section.
              Thus NUT may reply to answer client with Authority and Additional section including
              those values.

    DNS Client1 (TN)             DNS Server1 (NUT)              DNS Server7 (TN)
        |                              |                              |
        |                              |                              |
        |                              |  Before SOA REFRESH (180sec) |
        |                              |  timeout expired             |
        |                              |                              |
        |                              |----------------------------->|
        |                              | 1. Standard query            |
        |                              |  QNAME = sec.example.com     |
        |                              |  QTYPE = SOA (0x0006)        |
        |                              |                              |
        |                              |<-----------------------------|
        |                              | 2. Standard query response   |
        |                              |  QNAME = sec.example.com     |
        |                              |  QTYPE = SOA (0x0006)        |
        |                              |  ANSWER Name                 |
        |                              |       = sec.example.com      |
        |                              |  ANSWER Type                 |
        |                              |       = SOA (0x0006)         |
        |                              |  ANSWER SERIAL               |
        |                              |       = 2                    |
        |                              |                              |
        |                              |----------------------------->|
        |                              | 3. Standard query            |
        |                              |    using UDP or TCP          |
        |                              |  QNAME = sec.example.com     |
        |                              |  QTYPE = IXFR (0x00FB)       |
        |                              |  AUTHORITY Name              |
        |                              |       = sec.example.com      |
        |                              |  AUTHORITY Type              |
        |                              |       = SOA (0x0006)         |
        |                              |  AUTHORITY SERIAL            |
        |                              |       = 1                    |
        |                              |                              |
        v                              v                              v

        This test sequence is following.

        1. After SOA refresh time expired, DNS Server1 (NUT) transmits standard query 
           QNAME = sec.example.com, Type = SOA to DNS Server7 (TN). (Judgment *1)
        2. DNS Server7 (TN) sends standard query response with SOA serial = 2 to DNS Server1 (NUT).

        3. DNS Server1 (NUT) transmits standard query with QNAME = sec.example.com, Type = IXFR, 
           including Authority Name = sec.example.com, Type = SOA serial = 1 using UDP or TCP 
           to DNS Server7 (TN). (Judgment *3)

Packet Description



1st packet.

Standard query from DNS Server1 (NUT) to Server7 (TN)
IP Header	Source Address	NUT_NETZ
	Destination Address	SV7_NETZ
UDP Header	Src Port	ANY
	Dst Port	53
DNS Header	ID	ANY
	QR	0
	OPCODE	0
	AA	0
	TC	0
	RD	0
	RA	0
	Z	0
	RCODE	0
	QDCOUNT	1
	ANCOUNT	0
	NSCOUNT	0
	ARCOUNT	0
DNS Question section	QNAME	sec.example.com
	QTYPE	SOA (0x0006)
	QCLASS	IN (0x0001)



2nd packet.

Standard query response from DNS Server7 (TN) to Server1 (NUT)
IP Header	Source Address	SV7_NETZ
	Destination Address	NUT_NETZ
UDP Header	Src Port	53
	Dst Port	Value that NUT uses
DNS Header	ID	Value that NUT uses
	QR	1
	OPCODE	0
	AA	1
	TC	0
	RD	0
	RA	0
	Z	0
	RCODE	0
	QDCOUNT	1
	ANCOUNT	1
	NSCOUNT	2
	ARCOUNT	4
DNS Question section	QNAME	sec.example.com
	QTYPE	SOA (0x0006)
	QCLASS	IN (0x0001)
DNS Answer section	NAME	sec.example.com (Pointer 0xC00C)
	TYPE	SOA (0x0006)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	33
	MNAME	NS7.sec.example.com (NS7 + Pointer 0xC00C)
	RNAME	root.sec.example.com (root + Pointer 0xC00C)
	SERIAL	2
	REFRESH	180sec
	RETRY	30sec
	EXPIRE	360sec
	MINIMUM	30sec
DNS Authority section	NAME	sec.example.com (Pointer 0xC00C)
	TYPE	NS (0x0002)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	2
	NSDNAME	NS1.sec.example.com (NS1 + Pointer 0xC00C)
DNS Authority section	NAME	sec.example.com (Pointer 0xC00C)
	TYPE	NS (0x0002)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	2
	NSDNAME	NS7.sec.example.com (Pointer 0xC02D)
DNS Additional section	NAME	NS1.sec.example.com (Pointer 0xC05A)
	TYPE	A (0x0001)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	4
	ADDRESS	192.168.0.10
DNS Additional section	NAME	NS1.sec.example.com (Pointer 0xC05A)
	TYPE	AAAA (0x001C)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	16
	ADDRESS	3ffe:501:ffff:100::10
DNS Additional section	NAME	NS7.sec.example.com (Pointer 0xC02D)
	TYPE	A (0x0001)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	4
	ADDRESS	192.168.0.31
DNS Additional section	NAME	NS7.sec.example.com (Pointer 0xC02D)
	TYPE	AAAA (0x001C)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	16
	ADDRESS	3ffe:501:ffff:100::31



3rd packet.

Standard query from DNS Server1 (NUT) to Server7 (TN)
IP Header	Source Address	NUT_NETZ
	Destination Address	SV7_NETZ
TCP Header	Src Port	ANY
	Dst Port	53
DNS Header	ID	ANY
	QR	0
	OPCODE	0
	AA	0
	TC	0
	RD	0
	RA	0
	Z	0
	RCODE	0
	QDCOUNT	1
	ANCOUNT	0
	NSCOUNT	>=1
	ARCOUNT	0
DNS Question section	QNAME	sec.example.com
	QTYPE	IXFR (0x00FB)
	QCLASS	IN (0x0001)
DNS Authority section	NAME	sec.example.com (Pointer 0xC00C)
	TYPE	SOA (0x0006)
	CLASS	IN (0x0001)
	TTL	86400sec
	RDLENGTH	33
	MNAME	NS7.sec.example.com (NS7 + Pointer 0xC00C)
	RNAME	root.sec.example.com (root + Pointer 0xC00C)
	SERIAL	1
	REFRESH	180sec
	RETRY	30sec
	EXPIRE	360sec
	MINIMUM	30sec




Exp.


NUT_NETZ	DNS Server1's (NUT) Net-z address
CL1_NETZ	DNS Client1's (TN) Net-z address
SV7_NETZ	DNS Server7's (TN) Net-z address

JUDGMENT

        1. Received standard query with Type=SOA after SOA refresh time expired.
        3. Received standard query with Type=IXFR serial=1 using TCP.

TERMINATION

        None

REFERENCE

        RFC1995 Incremental Zone Transfer in DNS
        2. Brief Description of the Protocol
        3. Query Format