bind9/lib
Matthijs Mekking d9cca81d50 Grow dnssec-sign statistics instead of rotating
We have introduced dnssec-sign statistics to the zone statistics. This
introduced an operational issue because when using zone-statistics
full, the memory usage was going through the roof. We fixed this by
by allocating just four key slots per zone. If a zone exceeds the
number of keys for example through a key rollover, the keys will be
rotated out on a FIFO basis.

This works for most cases, and fixes the immediate problem of high
memory usage, but if you sign your zone with many, many keys, or are
sign with a ZSK/KSK double algorithm strategy you may experience weird
statistics. A better strategy is to grow the number of key slots per
zone on key rollover events.

That is what this commit is doing: instead of rotating the four slots
to track sign statistics, named now grows the number of key slots
during a key rollover (or via some other method that introduces new
keys).
2021-08-24 09:07:15 +02:00
..
bind9 Add (http-)listener-clients option (DoH quota mechanism) 2021-07-16 11:50:20 +03:00
dns Grow dnssec-sign statistics instead of rotating 2021-08-24 09:07:15 +02:00
irs Check parsed resconf values 2021-08-12 09:52:52 -07:00
isc Add a function isc_stats_resize 2021-08-24 09:07:15 +02:00
isccc Move the include Makefile.tests to the bottom of Makefile.am(s) 2021-06-24 15:33:52 +02:00
isccfg Make max number of HTTP/2 streams configurable 2021-07-16 11:50:22 +03:00
ns ns_client_error() could assert if rcode was overridden to NOERROR 2021-08-19 07:12:33 +02:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00
unit-test-driver.sh.in Enforce a run time limit on unit test binaries 2021-04-07 11:41:45 +02:00