ldns-test-edns(1)           General Commands Manual          ldns-test-edns(1)



NAME
       ldns-test-edns - test if dns cache supports EDNS and DNSSEC.

SYNOPSIS
       ldns-test-edns [ -i ] { ip }

DESCRIPTION
       ldns-test-edns  tests  a  DNS cache and checks if it supports EDNS0 and
       DNSSEC types so that it can be used as a dnssec-enabled DNS cache.   It
       sends  two  queries to the cache, one for the root key and one for a DS
       record.  These must succeed, the answer must have EDNS, that  type  and
       signatures.

       If  the IP address is good for DNSSEC, it is printed with 'OK'.  Other-
       wise short description is given of the failure.  If OK  is  given,  the
       cache  should  be  good to use as a cache for a local configured DNSSEC
       validator.

       The tool assumes the root is signed and Sweden is  signed.   Also,  the
       queries  are  sent  with  the CD flag, the tool does not check that the
       results are validated, but that they can be validated.

OPTIONS
       -i option enables a mode where the working  IP  addresses  are  printed
       after  another,  with  no other explanations, and if none work or no IP
       addresses are on the input, 'off' is printed.

       ldns-test-edns takes one or more IP addresses, it checks them in  turn.
       IPv4  and  IPv6 addresses can be given.  The exit value is for the last
       checked IP address: 0 is OK, 1 is failure, 2 is some  sort  of  network
       failure.

AUTHOR
       Written by the ldns team as an example for ldns usage.

REPORTING BUGS
       Report bugs to <ldns-team@nlnetlabs.nl>.

COPYRIGHT
       Copyright  (C) 2010 NLnet Labs. This is free software. There is NO war-
       ranty; not even for MERCHANTABILITY or FITNESS FOR  A  PARTICULAR  PUR-
       POSE.



                                  14 Dec 2010                ldns-test-edns(1)
