IBDNS: Intentionally Broken DNS server

#1

Post by patadune » Wed, May 29, 2024, 4:28 PM UTC

IBDNS: Intentionally Broken DNS server
afnic.fr

Re: IBDNS: Intentionally Broken DNS server

#2

Post by ResearchAtPlay » Wed, May 29, 2024, 4:42 PM UTC

The purpose of this tool is testing if a domain name system follows (or does not follow) the correct specifications:

IBDNS fills a gap in the universe of DNS test tools by offering the possibility of deviating intentionally and on demand from the DNS specifications, and thus simulating incorrect behaviour of authoritative name servers.

Re: IBDNS: Intentionally Broken DNS server

#3

Post by lelandfe » Wed, May 29, 2024, 5:18 PM UTC

Slides from a talk in 2022: https://indico.dns-oarc.net/event/44/contributions/949/attac...

Re: IBDNS: Intentionally Broken DNS server

#4

Post by [deleted] » Wed, May 29, 2024, 5:20 PM UTC

[deleted]

Re: IBDNS: Intentionally Broken DNS server

#5

Post by kachapopopow » Wed, May 29, 2024, 5:44 PM UTC

I absolutely love this. This will be amazing to trigger unexpected behavior in CoreDNS when working with dnsmasq pods that are resolved via wireguard.

I've had so many issues where I'd lose DNS inside pods and had to reschedule CoreDNS in order for it to start working again, hopefully I can finally trigger this on demand and find a solution for it.

Re: IBDNS: Intentionally Broken DNS server

#6

Post by ixau » Wed, May 29, 2024, 5:51 PM UTC

Excellent!

This is core infrastructure testing at its finest. I'm sure it will reveal bugs and behaviors noone expected.

Re: IBDNS: Intentionally Broken DNS server

#7

Post by nmz » Wed, May 29, 2024, 5:54 PM UTC

At first glance I thought this was a randomizer, like writing facebook and landing on X.

Re: IBDNS: Intentionally Broken DNS server

#8

Post by Severian » Wed, May 29, 2024, 6:02 PM UTC

Perfect addition for me. I use with badssl.com in my toolbox for training and coding tests. Need more "bad example" tools to cover corner cases and understand common failure modes.

Re: IBDNS: Intentionally Broken DNS server

#9

Post by LeoPanthera » Wed, May 29, 2024, 6:08 PM UTC

nmz wrote: post #7

At first glance I thought this was a randomizer, like writing facebook and landing on X.

Alas, https certificates prevent this idea from being possible.

Re: IBDNS: Intentionally Broken DNS server

#10

Post by maicro » Wed, May 29, 2024, 6:14 PM UTC

Severian wrote: post #8

Perfect addition for me. I use with badssl.com in my toolbox for training and coding tests. Need more "bad example" tools to cover corner cases and understand common failure modes.

In case anyone is looking for similar tools needs one for HTTP status codes:

https://httpstat.us https://httpstat.us/404