]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/resolve/resolved-dns-cache.c
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 34f8087) | patch
resolved: lower SERVFAIL cache timeout from 30s to 10s
authorLennart Poettering <lennart@poettering.net>
Thu, 12 Nov 2020 16:52:09 +0000 (17:52 +0100)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Wed, 2 Dec 2020 23:52:27 +0000 (08:52 +0900)
commit19bcef9dc3fde342f138394333ab04d7e44b7da2
treec7140d76badf850d34821b929ac7c48063a299f5tree | snapshot
parent34f80876f8a9dba2f569eb8fdacf785d64058c52commit | diff
resolved: lower SERVFAIL cache timeout from 30s to 10s

Apparently 30s is a bit too long for some cases, see #5552. But not
caching SERVFAIL at all also breaks stuff, see explanation in
201d99584ed7af8078bb243ce2587e5455074713.

Let's try to find some middle ground, by lowering the cache timeout to
10s. This should be ample for the problem
201d99584ed7af8078bb243ce2587e5455074713 attackes, but not as long as
half a miute, as #5552 complains.

Fixes: #5552
src/resolve/resolved-dns-cache.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.