mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-28 04:34:54 -04:00
We have introduced dnssec-sign statistics to the zone statistics. This introduced an operational issue because when using zone-statistics full, the memory usage was going through the roof. We fixed this by by allocating just four key slots per zone. If a zone exceeds the number of keys for example through a key rollover, the keys will be rotated out on a FIFO basis. This works for most cases, and fixes the immediate problem of high memory usage, but if you sign your zone with many, many keys, or are sign with a ZSK/KSK double algorithm strategy you may experience weird statistics. A better strategy is to grow the number of key slots per zone on key rollover events. That is what this commit is doing: instead of rotating the four slots to track sign statistics, named now grows the number of key slots during a key rollover (or via some other method that introduces new keys). |
||
|---|---|---|
| .. | ||
| bind9 | ||
| dns | ||
| irs | ||
| isc | ||
| isccc | ||
| isccfg | ||
| ns | ||
| .gitignore | ||
| Makefile.am | ||
| unit-test-driver.sh.in | ||