ืืืึทื ื, ืึท ื ืืืขืจ ืคืื ืืจืืืก ืื ืก ืืึทืืื ืื ืืก ืืื ืื ืก ืกืขืจืืืขืจ ืืึทื ืืึทืคืึทืงืืฉืขืจืขืจื ืืืขื ืืึทืืื ืึท ืฉืืึธืก ืืขืฉืขืขื ืืฉ ืืืืืื ื ืฆื ืคืึธืงืืก ืืคืืขืจืงืืึทืืงืืึทื ืืืืฃ ืืื IP ืคืจืึทืืืึทื ืืืืฉืึทื ืืืขื ืคึผืจืึทืกืขืกืื ื ืืจืืืก ืื ืก ืึทืจืืืงืืขื. ืืึธืก ืืื ืื ืจืืข ืึทืืึท ืืขืฉืขืขื ืืฉ, ืืขืฆืืข ืืึธืจ "ืื ืก ืคืึธื ืืึธื" ืืืืฃ ืื ืจืืืืืง ืคึผืจืึทืกืขืกืื ื ืคืื EDNS ืจืืงืืืขืก.
ืคึผืึทืจืืืกืืคึผืึทื ืฅ ืืื ืื ืื ืก ืคืึธื ืืึธื 2020 ืืื ืืฆืืืืืื ืคืึธืืขืจื ืึทื ืจืขืงืึทืืขื ืืื ืืึทืคืขืจ ืกืืืขืก ืคึฟืึทืจ EDNS ืืึธื ืืืื ืคืึทืจืคืขืกืืืงื ืฆื 1232 ืืืืขืก (MTU ืืจืืืก 1280 ืืื ืืก 48 ืืืืขืก ืคึฟืึทืจ ืืขืืขืจื), ืืื ืืขืืื ื ืืื ืคึผืจืึทืกืขืกืื ื ืจืืงืืืขืก ืืืจื TCP ืืื ืึท ืืืื-ืืึธืื ืฉืืจืื ืืืืฃ ืกืขืจืืืขืจืก. ืืื ืืืืื ืฉืืืฆื ืคึฟืึทืจ ืคึผืจืึทืกืขืกืื ื ืจืืงืืืขืก ืืืจื UDP ืืื ืื ืืขืฆืืืื ื ืืึทื ืืึทืืึธืจื, ืืื TCP ืืื ืืืกืืขื ืืื ืืืืืืขืจืึทืืึทื, ืึธืืขืจ ื ืืฉื ืคืืจืืื ืื ืคึฟืึทืจ ืึธืคึผืขืจืึทืฆืืข. ื ืื ะธ ืืคืืจืืฉ ืจืฉืืื TCP ืืื ืึท ืคืืจืืื ืื ืคืืืืงืืื ืคึฟืึทืจ ืื ืก ืฆื ืคืื ืงืฆืืึธื ืืจื ืจืืืืืง. ืื ืืื ืืฆืืืืืื ืืืืื ืฆื ืฆืืืื ืืขื ืื ืืืขืจืืึทื ื ืคืื ืฉืืงื ืจืืงืืืขืก ืืืืขืจ UDP ืฆื ื ืืฆื TCP ืืื ืงืึทืกืขืก ืืืขื ืื ืืขืืจืื ืืขื EDNS ืืึทืคืขืจ ืืจืืืก ืืื ื ืื ืืขื ืืืืง.
ืื ืคืืจืืขืืืืื ืขื ืืขืจืื ืืขื ืืืขื ืขืืืืื ืืจื ืฆืขืืืฉืื ื ืืื ืืฉืืืื ื ืื EDNS ืืึทืคืขืจ ืืจืืืก ืืื ืกืึธืืืืข ืื ืคึผืจืึธืืืขื ืคืื ืคืจืึทืืืึทื ืืืืฉืึทื ืคืื ืืจืืืก ืืืคึผ ืึทืจืืืงืืขื, ืื ืคึผืจืึทืกืขืกืื ื ืคืื ืืืึธืก ืึธืคื ืคืืจื ืฆื ืคึผืึทืงืึทื ืึธื ืืืขืจ ืืื ืืืืืึทืืฅ ืืืืฃ ืื ืงืืืขื ื ืืืึทื. ืืืืฃ ืืขืจ ืงืืืขื ื ืืืึทื, ืื EDNS ืืึทืคืขืจ ืืจืืืก ืืืขื ืืืื ืงืขืกืืืืขืจืืืง ืืื ืืจืืืก ืจืขืกืคึผืึธื ืกืขืก ืืืขื ืืืื ืืขืฉืืงื ืืืืื ืฆื ืืขื ืงืืืขื ื ืืืืขืจ TCP. ืืืกืืืืื ืฉืืงื ืืจืืืก ืึทืจืืืงืืขื ืืืืขืจ UDP ืืืขื ืืืื ืกืึธืืืืข ืคึผืจืึธืืืขืืก ืืื ืืจืืืก ืคึผืึทืงืืฅ ืืืึธืก ืืขื ืขื ืืจืึทืคึผื ืืืืฃ ืขืืืขืืข ืคืืจืขืืืึทืืืก ืืื ืืึธืื ืืืึทืงืื ื. ืคึฟืึทืจ ืคืึทืจืกืึทืืื ื ืื ืื ืก ืงืึทืฉ, ืืืืืจื ืืืืฃ ืื ืืึทื ืืคึผืืึทืืืืฉืึทื ืคืื ืคืจืึทืืืึทื ืืื ืืืคึผ ืคึผืึทืงืืฅ (ืืืขื ืฉืคึผืึทืืื ืืื ืคืจืึทืืืึทื ืฅ, ืื ืจืืข ืคืจืึทืืืขื ื ืืื ื ืืฉื ืึทื ืืืึทืืื ืึท ืืขืืขืจ ืืื ืึท ืืืืขื ืืืืขื, ืึทืืื ืขืก ืงืขื ืขื ืืืื ืคืึธืจืืืฉื, ืคึฟืึทืจ ืืืึธืก ืขืก ืืื ืืขื ืื ืืืืื ืคึฟืึทืจ ืื ืืฉืขืงืงืกืึทื ืฆื ืืืืึทืื) .
ืกืืึทืจืืื ื ืืืึทื ื, ืคึผืึทืจืืืกืึทืคึผืืืืื ื ืื ืก ืคึผืจืึทืืืืืืขืจื ืึทืจืืึทื ืืขืจืขืื ื CloudFlare, Quad 9, Cisco (OpenDNS) ืืื Google, EDNS ืืึทืคืขืจ ืืจืืืก ืคืื 4096 ืฆื 1232 ืืืืขืก ืืืืฃ ืืืื ืื ืก ืกืขืจืืืขืจืก (ืื EDNS ืขื ืืขืจืื ื ืืืขื ืืืื ืคืึทืจืฉืคึผืจืืืื ืืืืขืจ 4-6 ืืืึธืื ืืื ืืืขื ืืขืงื ืึท ืื ืงืจืืกืื ื ื ืืืขืจ ืคืื ืจืืงืืืขืก ืืืืขืจ ืฆืืื). ืจืขืกืคึผืึธื ืกืขืก ืฆื UDP ืจืืงืืืขืก ืืืึธืก ืืึธื ื ืื ืคึผืึทืกืืง ืืื ืื ื ืืึทืข ืืืืื ืืืขื ืืืื ืืขืฉืืงื ืืืจื TCP. DNS ืกืขืจืืืขืจ ืืืขื ืืึธืจืก ืึทืจืืึทื ืืขืจืขืื ื BIND, Unbound, Knot, NSD ืืื PowerDNS ืืืขื ืืขืืืื ื ืืขืจืืืึทื ืืืงืื ืืขื ืฆื ืืืืฉื ืื ืคืขืืืงืืึทื EDNS ืืึทืคืขืจ ืืจืืืก ืคืื 4096 ืืืืขืก ืฆื 1232 ืืืืขืก.
ืืขืกืึธืฃ, ืื ืขื ืืขืจืื ืืขื ืงืขื ืขื ืคืืจื ืฆื ืืึทืืืึธืืข ืคึผืจืึธืืืขืืก ืืืขื ืึทืงืกืขืกืื ื DNS ืกืขืจืืืขืจืก ืืืขืืขื ืก UDP DNS ืจืขืกืคึผืึธื ืกืขืก ืืงืกืื 1232 ืืืืขืก ืืื ืงืขื ืขื ื ืืฉื ืฉืืงื ืึท TCP ืขื ืืคืขืจ. ืึทื ืขืงืกืคึผืขืจืืืขื ื ืืืจืืืขืงืึธืื ืืื Google ืืึธื ืืขืืืืื ืึทื ืืฉืึทื ืืื ื ืื EDNS ืืึทืคืขืจ ืืจืืืก ืืื ืืืขื ืงืืื ืืืืจืงืื ื ืืืืฃ ืื ืืืจืืคืึทื ืงืืจืก - ืืื ืึท ืืึทืคืขืจ ืคืื 4096 ืืืืขืก, ืื ื ืืืขืจ ืคืื ืืจืึทื ืืงืืืืื UDP ืจืืงืืืขืก ืืื 0.345%, ืืื ืื ื ืืืขืจ ืคืื ืึทื ืจืืืฉืึทืืึทื ืจืืืจืืฉืึทื ื ืืืืขืจ TCP ืืื 0.115%. ืืื ืึท ืืึทืคืขืจ ืคืื 1232 ืืืืขืก, ืื ืคืืืืขืจื ืืขื ืขื 0.367% ืืื 0.116%. ืืืื TCP ืฉืืืฆื ืึท ืคืืจืืื ืื ืื ืก ืฉืืจืื ืืืขื ืคืึทืจืฉืึทืคื ืคึผืจืึธืืืขืืก ืืื ืืืขืื 0.1% ืคืื ืื ืก ืกืขืจืืืขืจืก. ืขืก ืืื ืืืืขืจืงื ืึทื ืืื ืืึธืืขืจื ืื ืึธืื, ืึธื ืืงืคึผ, ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโืื ืกืขืจืืืขืจืก ืืื ืฉืืื ืึทื ืกืืืืืึทื.
ืึทืืืื ืืกืืจืึทืืึธืจืก ืคืื ืึทืืึธืจืึทืืืืืืื ืื ืก ืกืขืจืืืขืจืก ืืึธื ืขื ืฉืืจ ืึทื ืืืืขืจ ืกืขืจืืืขืจ ืจืืกืคึผืึทื ืื ืืืจื ืืงืคึผ ืืืืฃ ื ืขืฅ ืคึผืึธืจื 53 ืืื ืึทื ืืขื ืืงืคึผ ืคึผืึธืจื ืืื ื ืืฉื ืืคืืขืฉืืขืื ืืืจื ืึท ืคืืืจืืืึทื. ื ืจืขืคึผืืึทืืึทืืึทื ืื ืก ืกืขืจืืืขืจ ืืึธื ืืืื ื ืืฉื ืฉืืงื UDP ืจืขืกืคึผืึธื ืกืขืก ืืืึธืก ืืขื ืขื ืืจืขืกืขืจ ืืื
ืืขืืขืื EDNS ืืึทืคืขืจ ืืจืืืก. ืืืืฃ ืื ืกืขืจืืืขืจ ืืื, ืื EDNS ืืึทืคืขืจ ืืจืืืก ืืึธื ืืืื ืืึทืฉืืืื ืฆื 1232 ืืืืขืก. ืจืขืกืึธืืืืขืจืก ืืึธืื ืืขืขืจืขื ืื ืืขืืืข ืจืขืงืืืืจืขืืขื ืฅ - ืืึทื ืืึทืืึธืจื ืคืืืืงืืื ืฆื ืจืืกืคึผืึทื ื ืืืจื ืืงืคึผ, ืืึทื ืืึทืืึธืจื ืฉืืืฆื ืคึฟืึทืจ ืฉืืงื ืจืืคึผืืืื ืจืืงืืืขืก ืืืจื ืืงืคึผ ืืืขื ืจืืกืืืืื ื ืึท ืืจืึทื ืืงืืืืื ืืืคึผ ืขื ืืคืขืจ, ืืื ืืึทืฉืืขืืืงื ืื EDNS ืืึทืคืขืจ ืฆื 1232 ืืืืขืก.
ืื ืคืืืืขื ืืข ืคึผืึทืจืึทืืขืืขืจืก ืืขื ืขื ืคืึทืจืึทื ืืืืึธืจืืืขื ืคึฟืึทืจ ืืึทืฉืืขืืืงื ืื EDNS ืืึทืคืขืจ ืืจืืืก ืืื ืคืึทืจืฉืืืขื ืข ืื ืก ืกืขืจืืืขืจืก:
ืึธืคึผืฆืืขืก {
ืขืื ืก-ืืืคึผ-ืืจืืืก 1232;
ืืึทืงืก-ืืืคึผ-ืืจืืืก 1232;
};
ืืึทืงืก-ืืืคึผ-ืคึผืืืืึธืึทื: 1232
net.bufsize(1232)
udp-truncation-threshold=1232
edns-outgoing-bufsize=1232
udp-truncation-threshold=1232
ืขืื ืก-ืืึทืคืขืจ-ืืจืืืก: 1232
ืืคึผืื4-ืขืื ืก ืืจืืืก: 1232
ืืคึผืื6-ืขืื ืก ืืจืืืก: 1232
ืืงืืจ: opennet.ru