bind9/lib
Michał Kępień bf2ea6d852 Bound the amount of work performed for delegations
Limit the amount of database lookups that can be triggered in
fctx_getaddresses() (i.e. when determining the name server addresses to
query next) by setting a hard limit on the number of NS RRs processed
for any delegation encountered.  Without any limit in place, named can
be forced to perform large amounts of database lookups per each query
received, which severely impacts resolver performance.

The limit used (20) is an arbitrary value that is considered to be big
enough for any sane DNS delegation.

(cherry picked from commit 3a44097fd6)
2022-09-08 11:11:30 +02:00
..
bind9 dnssec-policy now requires inline-signing 2022-09-06 09:06:17 +02:00
dns Bound the amount of work performed for delegations 2022-09-08 11:11:30 +02:00
irs Update clang to version 14 2022-06-16 18:11:03 +02:00
isc Add mctx attach/detach when creating/destroying a memory pool 2022-09-02 09:05:03 +00:00
isccc Update clang to version 14 2022-06-16 18:11:03 +02:00
isccfg Update clang to version 14 2022-06-16 18:11:03 +02:00
ns Fix RRL responses-per-second bypass using wildcard names 2022-09-08 09:41:15 +02:00
win32/bindevt Update the copyright information in all files in the repository 2022-01-11 12:22:09 +01:00
.gitignore added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Kyuafile Update the copyright information in all files in the repository 2022-01-11 12:22:09 +01:00
Makefile.in Update the copyright information in all files in the repository 2022-01-11 12:22:09 +01:00