NAME

       ldns-test-edns - test if dns cache supports EDNS and DNSSEC.

SYNOPSIS

       ldns-test-edns [ -i ] { ip }

DESCRIPTION

       ldns-test-edns  tests a DNS cache and checks if it supports EDNS0 and DNSSEC types so that
       it can be used as a dnssec-enabled DNS cache.  It sends two queries to the cache, one  for
       the root key and one for a DS record.  These must succeed, the answer must have EDNS, that
       type and signatures.

       If the IP address  is  good  for  DNSSEC,  it  is  printed  with  'OK'.   Otherwise  short
       description is given of the failure.  If OK is given, the cache should be good to use as a
       cache for a local configured DNSSEC validator.

       The tool assumes the root is signed and Sweden is signed.  Also, the queries are sent with
       the  CD flag, the tool does not check that the results are validated, but that they can be
       validated.

OPTIONS

       -i option enables a mode where the working IP addresses are printed after another, with no
       other  explanations,  and  if  none  work  or  no  IP addresses are on the input, 'off' is
       printed.

       ldns-test-edns takes one or more IP addresses, it checks them  in  turn.   IPv4  and  IPv6
       addresses  can be given.  The exit value is for the last checked IP address: 0 is OK, 1 is
       failure, 2 is some sort of network failure.

AUTHOR

       Written by the ldns team as an example for ldns usage.

REPORTING BUGS

       Report bugs to <ldns-team@nlnetlabs.nl>.

COPYRIGHT

       Copyright (C) 2010 NLnet Labs. This is free software. There is NO warranty; not  even  for
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

                                           14 Dec 2010                          ldns-test-edns(1)