EDNS0 padding in responses [DoT]

NSD
1

Have you considered adding support for EDNS0 padding in NSD [for DoT responses]?

2

Thanks for the suggestion. It would be relatively straight forward, so yes I do think I can squeeze that in sometime somehow. I’ll keep you posted.

3

See EDNS0 padding option support with DoT by wtoorop · Pull Request #494 · NLnetLabs/nsd · GitHub

4

@kdrenard Coming Wednesday, NSD 4.15.2 will be released that will respond with padding on TLS (to queries with padding), and can do the same on specific UDP ports with the udp-padding-port option to facilitate setups with a client facing DNS-over-TLS frontend that forwards queries to a back-end NSD service over UDP.

5

This is fantastic! I will definitely set this up and try it out.

-Ken

6

We have been running this successfully for several days now. EDNS padding is now available on our DoT/DoQ service. I really appreciate your work on this!

-Ken