Ondřej Surý 15096aefdf Make the dns_validator validations asynchronous and limit it ... Instead of running all the cryptographic validation in a tight loop, spread it out into multiple event loop "ticks", but moving every single validation into own isc_async_run() asynchronous event. Move the cryptographic operations - both verification and DNSKEY selection - to the offloaded threads (isc_work_enqueue), this further limits the time we spend doing expensive operations on the event loops that should be fast. Limit the impact of invalid or malicious RRSets that contain crafted records causing the dns_validator to do many validations per single fetch by adding a cap on the maximum number of validations and maximum number of validation failures that can happen before the resolving fails.		2024-02-01 21:45:06 +01:00
..
dns	Make the dns_validator validations asynchronous and limit it	2024-02-01 21:45:06 +01:00
dst	Make the dns_validator validations asynchronous and limit it	2024-02-01 21:45:06 +01:00
irs	Move irs_resconf into libdns and remove libirs	2023-02-24 09:38:59 +00:00
.clang-format	Add separate .clang-format files for headers	2020-02-14 09:31:05 +01:00