Aram Sargsyan c7f79a0353 Add a quota for SIG(0) signature checks ... In order to protect from a malicious DNS client that sends many queries with a SIG(0)-signed message, add a quota of simultaneously running SIG(0) checks. This protection can only help when named is using more than one worker threads. For example, if named is running with the '-n 4' option, and 'sig0checks-quota 2;' is used, then named will make sure to not use more than 2 workers for the SIG(0) signature checks in parallel, thus leaving the other workers to serve the remaining clients which do not use SIG(0)-signed messages. That limitation is going to change when SIG(0) signature checks are offloaded to "slow" threads in a future commit. The 'sig0checks-quota-exempt' ACL option can be used to exempt certain clients from the quota requirements using their IP or network addresses. The 'sig0checks-quota-maxwait-ms' option is used to define a maximum amount of time for named to wait for a quota to appear. If during that time no new quota becomes available, named will answer to the client with DNS_R_REFUSED.		2024-06-10 17:33:08 +02:00
..
cfg_test.c	Use EXIT_SUCCESS and EXIT_FAILURE	2024-02-08 08:01:58 +01:00
checkgrammar.py	Sort grammar map keys while pretty printing them	2022-07-01 08:59:23 +02:00
dnssec-policy.default.conf	Add signatures-jitter option	2024-04-18 09:50:10 +02:00
forward.zoneopt	remove {root-}delegation-only	2023-03-23 12:57:01 -07:00
hint.zoneopt	remove {root-}delegation-only	2023-03-23 12:57:01 -07:00
in-view.zoneopt	[master] automatically generate named.conf grammars for the ARM	2018-01-22 11:06:32 -08:00
Makefile.am	Add support for User Statically Defined Tracing (USDT) probes	2023-08-21 18:39:53 +02:00
mirror.zoneopt	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00
options	Add a quota for SIG(0) signature checks	2024-06-10 17:33:08 +02:00
parsegrammar.py	Add a new library to parse grammar format produced by cfg_test	2022-07-01 08:59:04 +02:00
primary.zoneopt	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00
redirect.zoneopt	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00
rndc.grammar	remove nonfunctional DSCP implementation	2023-01-09 12:15:21 -08:00
secondary.zoneopt	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00
sort-options.pl	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00
static-stub.zoneopt	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00
stub.zoneopt	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00