bind9/lib
Mark Andrews 3a5652ccb1
Rework rbtdb.c:find_coveringnsec() to use the auxilary nsec rbt
this improves the performance of looking for NSEC and RRSIG(NSEC)
records in the cache by skipping lots of nodes in the main trees
in the cache without these records present.  This is a simplified
version of previous_closest_nsec() which uses the same underlying
mechanism to look for NSEC and RRSIG(NSEC) records in authorative
zones.

The auxilary NSEC tree was already being maintained as a side effect
of looking for the covering NSEC in large zones where there can be
lots of glue records that needed to be skipped.  Nodes are added
to the tree whenever a NSEC record is added to the primary tree.
They are removed when the corresponding node is removed from the
primary tree.

Having nodes in the NSEC tree w/o NSEC records in the primary tree
should not impact on synth-from-dnssec efficiency as that node would
have held the NSEC we would have been needed to synthesise the
response.  Removing the node when the NSEC RRset expires would only
cause rbtdb to return a NSEC which would be rejected at a higher
level.
2021-12-02 14:18:40 +01:00
..
bind9 Add 'tls' validation for XoT enabled primaries 2021-12-01 12:00:29 +02:00
dns Rework rbtdb.c:find_coveringnsec() to use the auxilary nsec rbt 2021-12-02 14:18:40 +01:00
irs Check parsed resconf values 2021-08-12 09:52:52 -07:00
isc Improve the logging on failed TCP accept 2021-12-02 13:50:00 +01:00
isccc Use #pragma once as header guards 2021-10-13 00:49:15 -07:00
isccfg Integrate extended ACLs syntax featuring 'port' and 'transport' opts 2021-11-30 12:20:22 +02:00
ns Integrate extended ACLs syntax featuring 'port' and 'transport' opts 2021-11-30 12:20:22 +02:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00
unit-test-driver.sh.in Enforce a run time limit on unit test binaries 2021-04-07 11:41:45 +02:00