From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 125845 invoked by alias); 24 May 2019 15:24:01 -0000 Mailing-List: contact libc-help-help@sourceware.org; run by ezmlm Precedence: bulk List-Subscribe: List-Post: List-Help: , Sender: libc-help-owner@sourceware.org Received: (qmail 125829 invoked by uid 89); 24 May 2019 15:24:01 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-6.4 required=5.0 tests=AWL,BAYES_00,SPF_HELO_PASS autolearn=ham version=3.3.1 spammy=HX-Languages-Length:817, our X-HELO: mx1.redhat.com Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Fri, 24 May 2019 15:24:00 +0000 Received: from smtp.corp.redhat.com (int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 3DD2F307DA31; Fri, 24 May 2019 15:23:59 +0000 (UTC) Received: from oldenburg2.str.redhat.com (dhcp-192-219.str.redhat.com [10.33.192.219]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 99C577D583; Fri, 24 May 2019 15:23:58 +0000 (UTC) From: Florian Weimer To: Babu Prasad Cc: libc-help@sourceware.org Subject: Re: DNS source ip support for glibc gethostbyname API References: <87ftp4rsl9.fsf@oldenburg2.str.redhat.com> Date: Fri, 24 May 2019 15:24:00 -0000 In-Reply-To: (Babu Prasad's message of "Fri, 24 May 2019 20:15:06 +0530") Message-ID: <87d0k7q3jm.fsf@oldenburg2.str.redhat.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-IsSubscribed: yes X-SW-Source: 2019-05/txt/msg00047.txt.bz2 * Babu Prasad: >> On Fri, May 24, 2019, 17:07 Florian Weimer wrote: >> >> * Babu Prasad: >> >> > could you please tell me that are we(glibc) supporting DNS >> > source ip as part of our DNS ip resolution. ie as part gethostbyname is >> > there any option which can carry my source ip also since there is a >> > requirement as part of PBR. >> >> Do you mean support for RFC 7871 (Client Subnet in DNS Queries)? > Hi Florian, Thanks for responding, yes you are right. RFC 7871 support > is one application, but this can be extended for my case also. Our position is that this scenario is best handled by a local DNS resolver running on the same host. The scope of possible policies related to this feature is rather large. Thanks, Florian