Configurable DNS domain validation for SRV records

XMLWordPrintableJSON

    • Configurable DNS domain validation for SRV records
    • Python Drivers
    • Needed
    • Hide

      Summary of necessary driver changes

      •  

      Commits for syncing spec/prose tests
      (and/or refer to an existing language POC if needed)

      •  

      Context for other referenced/linked tickets

      •  
      Show
      Summary of necessary driver changes   Commits for syncing spec/prose tests (and/or refer to an existing language POC if needed)   Context for other referenced/linked tickets  
    • In Progress
    • 0
    • 0
    • 0
    • 100
    • None
    • None
    • Hide

      2026-06-11 - No confidence status provided
      No project update provided

      2026-02-12 - No confidence status provided
      No project update provided

      Show
      2026-06-11 - No confidence status provided No project update provided 2026-02-12 - No confidence status provided No project update provided
    • Needed
    • $i18n.getText("admin.common.words.hide")
      Key Status/Resolution FixVersion
      PYTHON-5814 Investigating
      CDRIVER-6351 Backlog
      CXX-3515 Backlog
      CSHARP-6077 Needs Triage
      GODRIVER-3953 Backlog
      JAVA-6233 Defining
      NODE-7610 Backlog
      PHPLIB-1867 Done
      RUBY-3899 Backlog
      RUST-2444 Needs Triage
      $i18n.getText("admin.common.words.show")
      #scriptField, #scriptField *{ border: 1px solid black; } #scriptField{ border-collapse: collapse; } #scriptField td { text-align: center; /* Center-align text in table cells */ } #scriptField td.key { text-align: left; /* Left-align text in the Key column */ } #scriptField a { text-decoration: none; /* Remove underlines from links */ border: none; /* Remove border from links */ } /* Add green background color to cells with FixVersion */ #scriptField td.hasFixVersion { background-color: #00FF00; /* Green color code */ } #scriptField td.willNotDo { background-color: #FF0000; /* Red color code */ } /* Center-align the first row headers */ #scriptField th { text-align: center; } Key Status/Resolution FixVersion PYTHON-5814 Investigating CDRIVER-6351 Backlog CXX-3515 Backlog CSHARP-6077 Needs Triage GODRIVER-3953 Backlog JAVA-6233 Defining NODE-7610 Backlog PHPLIB-1867 Done RUBY-3899 Backlog RUST-2444 Needs Triage
    • None
    • None
    • Hide
      [June 11, 2026] This is currently in investigation by an engineer, and should have a draft up soon.

      2026-03-18: Citigroup asking for a timeline, so shared our 06/30th public preview target.

      2026-02-17: Citigroup and Morgan Stanley are both looking for this functionality, which we'll use to prioritize which language drivers we deliver this feature in first.
      Show
      [June 11, 2026] This is currently in investigation by an engineer, and should have a draft up soon. 2026-03-18: Citigroup asking for a timeline, so shared our 06/30th public preview target. 2026-02-17: Citigroup and Morgan Stanley are both looking for this functionality, which we'll use to prioritize which language drivers we deliver this feature in first.
    • None
    • None
    • None

      According to the Initial DNS Seedlist Discovery specification, "A driver MUST verify that the host names returned through SRV records share the original SRV's domainname. In addition, SRV records with fewer than three . separated parts, the returned hostname MUST have at least one more domain level than the SRV record hostname. Drivers MUST raise an error and MUST NOT initiate a connection to any returned hostname which does not fulfill these requirements."

      The parsing logic however assumes that the left-most part of a URL (period-separated) is the subdomain, and everything to the right of that is the domain. This can result in user-managed DNS records that should be valid being considered invalid.

      For example, if a DNS record of _mongodb._tcp.mongodb.mydomain.net contained regionally separated URLs in the form of:

      • mongodb1.us-east-1.mydomain.net
      • mongodb2.us-east-1.mydomain.net
      • mongodb3.us-west-1.mydomain.net

      this would be considered invalid.

       

      Acceptance Criteria

      • update appropriate specification docs (initial-dns-seedlist-discovery and uri-options) about the new parameter, srvAllowedHostsSuffix
      • add unified tests

            Assignee:
            Iris Ho
            Reporter:
            Alex Bevilacqua
            Jib Adegunloye Jib Adegunloye
            Rishabh Bisht Rishabh Bisht
            None
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              2 weeks, 5 days
              None
              None
              None