Remove DNSSEC parameters and configure AuthenticatedData (#2208)

netbirdio · Jul 3, 2024 · fb99b4e · fb99b4e
1 parent f672675
commit fb99b4e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/client/internal/dns/upstream.go b/client/internal/dns/upstream.go
@@ -78,9 +78,10 @@ func (u *upstreamResolverBase) ServeDNS(w dns.ResponseWriter, r *dns.Msg) {
 	}()
 
 	log.WithField("question", r.Question[0]).Trace("received an upstream question")
-	// set the EDNS0 buffer size to 4096 bytes to support larger dns records
+	// set the AuthenticatedData flag and the EDNS0 buffer size to 4096 bytes to support larger dns records
 	if r.Extra == nil {
-		r.SetEdns0(4096, true)
+		r.SetEdns0(4096, false)
+		r.MsgHdr.AuthenticatedData = true
 	}
 
 	select {