Merge pull request #6872 from pieterlexis/ixfrdist-limit-size

ixfrdist: Add option to limit AXFR record count

diff --cc docs/manpages/ixfrdist.yml.5.rst
Simple merge

diff --cc pdns/ixfrdist.cc
index 1ba8ffed0c0213ca501fbb887e5c0e65b2777cc7,48f26f07008be6df1a6511d9ab78ee796105f053..f49e0fae56228e7b77dd6c547589e048680eca81
--- 1/pdns/ixfrdist.cc
--- 2/pdns/ixfrdist.cc
+++ b/pdns/ixfrdist.cc
@@@ -267,11 -232,9 +267,11 @@@ static void updateCurrentZoneInfo(cons
  {
    std::lock_guard<std::mutex> guard(g_soas_mutex);
    g_soas[domain] = newInfo;
 +  g_stats.setSOASerial(domain, newInfo->soa->d_st.serial);
 +  // FIXME: also report zone size?
  }
  
- void updateThread(const string& workdir, const uint16_t& keep, const uint16_t& axfrTimeout, const uint16_t& soaRetry) {
+ void updateThread(const string& workdir, const uint16_t& keep, const uint16_t& axfrTimeout, const uint16_t& soaRetry, const uint32_t axfrMaxRecords) {
    setThreadName("ixfrdist/update");
    std::map<DNSName, time_t> lastCheck;
  
@@@ -394,12 -352,13 +394,15 @@@
              nrecords++;
              if (dr.d_type == QType::SOA) {
                soa = getRR<SOARecordContent>(dr);
 +              soaTTL = dr.d_ttl;
              }
            }
+           if (axfrMaxRecords != 0 && nrecords > axfrMaxRecords) {
+             throw PDNSException("Received more than " + std::to_string(axfrMaxRecords) + " records in AXFR, aborted");
+           }
            axfr_now = time(nullptr);
            if (axfr_now - t_start > axfrTimeout) {
 +            g_stats.incrementAXFRFailures(domain);
              throw PDNSException("Total AXFR time exceeded!");
            }
          }

diff --cc pdns/ixfrdist.example.yml
Simple merge