Evan Hunt 83d0b1ab69 [v9_10] DDoS mitigation features ... 3938. [func] Added quotas to be used in recursive resolvers that are under high query load for names in zones whose authoritative servers are nonresponsive or are experiencing a denial of service attack. - "fetches-per-server" limits the number of simultaneous queries that can be sent to any single authoritative server. The configured value is a starting point; it is automatically adjusted downward if the server is partially or completely non-responsive. The algorithm used to adjust the quota can be configured via the "fetch-quota-params" option. - "fetches-per-zone" limits the number of simultaneous queries that can be sent for names within a single domain. (Note: Unlike "fetches-per-server", this value is not self-tuning.) - New stats counters have been added to count queries spilled due to these quotas. These options are not available by default; use "configure --enable-fetchlimit" (or --enable-developer) to include them in the build. See the ARM for details of these options. [RT #37125]		2015-07-08 22:55:31 -07:00
..
isc	[v9_10] DDoS mitigation features	2015-07-08 22:55:31 -07:00
pk11	[master] better error output when initializing pkcs11	2014-03-12 20:52:01 -07:00
pkcs11	[master] merge libiscpk11 to libisc	2014-02-11 21:20:28 -08:00
Makefile.in	update copyright notice	2014-02-12 23:46:27 +00:00