Created attachment 8527 [details] network trace of DC using internal DNS - resolving failures and successes the command dig -t any samba.org will result in failure to retrieve any records. The command dig -t rrsig isc.org will result in failure to retrieve the record. Seems any query too large will fail to arrive at the internal dns server, though the request will be forwarded to a bind server and the bind server will correctly resolve the query.
Created attachment 8528 [details] network trace of bind server queries forwarded by internal DNS - resolving failures and successes
I'm working on a fix here.
Created attachment 8919 [details] Add support for OPT record
Created attachment 8920 [details] And support larger DNS queries Together with the OPT record support, this fixes the problem of not being able to forward large DNS responses.
someone please review and assign to Karolin.
Created attachment 8953 [details] Add support for OPT record Now cherry-picked with -x
Created attachment 8954 [details] And support larger DNS queries cherry-picked with -x
Reassign to Karolin for 4.0
Pushed to autobuild-v4-0-test.
Pushed to v4-0-test. Closing out bug report. Thanks!