fardog / secureoperator Goto Github PK

Running dig @127.0.0.1 -p 8853 rrsig debian.org pointed to dingo gives this log:

$ ./secure-operator_linux-amd64 -listen 127.0.0.1:8853 -udp
INFO[0000] starting udp service on 127.0.0.1:8853       
INFO[0000] starting tcp service on 127.0.0.1:8853       
INFO[0004] requesting debian.org. RRSIG                 
ERRO[0006] Error writing DNS response: dns: nil rr

And does not return any data, check what should be returned by running dig @8.8.8.8 rrsig debian.org

dingo has the same bug here

https://github.com/chenhw2/google-https-dns seems to work for RRSIG

my Go version is 1.8 version

See https://github.com/fardog/secureoperator/blob/master/dns_client.go#L149

These servers should be queried in order, and most DNS clients would do, moving on to the secondary only after the primary has failed.