]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Share tickets key between identical frontends created via YAML
authorRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 3 Mar 2025 10:57:54 +0000 (11:57 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Wed, 2 Apr 2025 10:28:57 +0000 (12:28 +0200)
commitd0cf129d3871c7d30b6bef4b4143b7af52d43355
tree30367d1e12f75d1f426b5b0a8232346aa55ce463
parent9c613b27898943a6130c973d0ea0d5eba2394377
dnsdist: Share tickets key between identical frontends created via YAML

Using the same Session Ticket Encryption Key on identical frontends
allow TLS sessions to be resumed in a much more efficient way, reducing
the latency and CPU usage. While it was already possible to do so by
manually managing the STEK, the default behaviour was to create and use
a different STEK for each frontend, because our Lua configuration makes
it almost impossible to ensure that two frontends are identical.
This is not an issue with the new YAML configuration format, so let's
share the STEK automatically in this case.

This needs a regression test.
12 files changed:
pdns/dnsdistdist/dnsdist-carbon.cc
pdns/dnsdistdist/dnsdist-configuration-yaml.cc
pdns/dnsdistdist/dnsdist-doh-common.cc
pdns/dnsdistdist/dnsdist-doh-common.hh
pdns/dnsdistdist/dnsdist-lua-inspection.cc
pdns/dnsdistdist/dnsdist-lua.cc
pdns/dnsdistdist/dnsdist-tcp-upstream.hh
pdns/dnsdistdist/dnsdist-web.cc
pdns/dnsdistdist/dnsdist.hh
pdns/dnsdistdist/doh.cc
pdns/tcpiohandler.cc
pdns/tcpiohandler.hh