]> git.ipfire.org Git - thirdparty/bind9.git/commit
Disable NSEC Aggressive Cache (synth-from-dnssec) by default
authorOndřej Surý <ondrej@sury.org>
Mon, 28 Oct 2019 20:04:38 +0000 (15:04 -0500)
committerOndřej Surý <ondrej@sury.org>
Tue, 29 Oct 2019 09:10:12 +0000 (04:10 -0500)
commita20c42dca68737ca341bd24fff403cf5c7940aa1
treee8b32ed327692bae73ec18964b258652bfdc1969
parent7abd918d73d62eb18f91be26969f6a3c3421e01a
Disable NSEC Aggressive Cache (synth-from-dnssec) by default

It was found that NSEC Aggressive Caching has a significant performance impact
on BIND 9 when used as recursor.  This commit disables the synth-from-dnssec
configuration option by default to provide immediate remedy for people running
BIND 9.12+.  The NSEC Aggressive Cache will be enabled again after a proper fix
will be prepared.
bin/named/config.c
doc/arm/Bv9ARM-book.xml