]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
fix: usr: Prevent crafted queries from degrading RRL performance 3134-disable-tls-renegotiations
authorOndřej Surý <ondrej@isc.org>
Mon, 4 May 2026 12:58:42 +0000 (14:58 +0200)
committerOndřej Surý <ondrej@isc.org>
Mon, 4 May 2026 12:58:42 +0000 (14:58 +0200)
With response rate limiting enabled, an attacker sending queries from many
spoofed source addresses could steer entries into the same slot of the
internal rate-limit table and slow down query processing on the affected
server. The table now uses a per-process keyed hash so the placement of
entries cannot be predicted or influenced from the network.

Closes #5906

Merge branch '5906-rrl-hash-collision-dos' into 'main'

See merge request isc-projects/bind9!11950


Trivial merge