[Unbound-users] Configuring CNAME for nosslsearch.google.com

[Stephan Lagerholm]

> -----Original Message-----
> From: unbound-users-bounces at unbound.net [mailto:unbound-users-
> bounces at unbound.net] On Behalf Of Jan-Piet Mens
> Sent: Tuesday, April 17, 2012 11:06 AM
> To: unbound-users at unbound.net
> Subject: Re: [Unbound-users] Configuring CNAME for
> nosslsearch.google.com
> 
> > >        local_data "www.google.com. CNAME nosslsearch.google.com."
> >
> > Unless something has changed CNAME does not work. This is explained
> here:
> > http://unbound.net/pipermail/unbound-users/2009-March/000509.html
> 
> Apart from the fact that I erroneously used an underscore instead of a
> dash in `local-data', it works: it returns the CNAME. But you are
> indeed correct in that it doesn't expand the CNAME, which is probably
> what the OP needs.

You are right in that it works if a client would ask for the CNAME.
However, the client will never ask for the CNAME, it will ask for an A
or AAAA and expects the expanded CNAME back. That does not work in
unbound with local-data.

Best thing to do is to use an A and AAAA record instead.

/S