Ondřej Surý 15096aefdf Make the dns_validator validations asynchronous and limit it ... Instead of running all the cryptographic validation in a tight loop, spread it out into multiple event loop "ticks", but moving every single validation into own isc_async_run() asynchronous event. Move the cryptographic operations - both verification and DNSKEY selection - to the offloaded threads (isc_work_enqueue), this further limits the time we spend doing expensive operations on the event loops that should be fast. Limit the impact of invalid or malicious RRSets that contain crafted records causing the dns_validator to do many validations per single fetch by adding a cap on the maximum number of validations and maximum number of validation failures that can happen before the resolving fails.		2024-02-01 21:45:06 +01:00
..
dns	Make the dns_validator validations asynchronous and limit it	2024-02-01 21:45:06 +01:00
isc	Make the dns_validator validations asynchronous and limit it	2024-02-01 21:45:06 +01:00
isccc	NetBSD has added 'hmac' to libc so rename out uses of hmac	2023-12-13 22:27:38 +00:00
isccfg	Make the dns_validator validations asynchronous and limit it	2024-02-01 21:45:06 +01:00
ns	Restore dns64 state during serve-stale processing	2024-01-05 12:17:00 +01:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	Move irs_resconf into libdns and remove libirs	2023-02-24 09:38:59 +00:00