From: Ondřej Surý <ondrej@sury.org>
Date: Thu, 19 Mar 2026 04:06:47 +0000 (+0100)
Subject: Do not reuse shared TCP dispatches for zone transfers
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6e78094ebd8ebc31b71d62af6671d600aecb68e3;p=thirdparty%2Fbind9.git

Do not reuse shared TCP dispatches for zone transfers

Zone transfers (XFRIN) need a dedicated TCP connection because they
are long-lived and stream the entire zone.
---

diff --git a/lib/dns/dispatch.c b/lib/dns/dispatch.c
index bef5165a516..8dfd4bd3fe2 100644
--- a/lib/dns/dispatch.c
+++ b/lib/dns/dispatch.c
@@ -1286,7 +1286,9 @@ dns_dispatch_createtcp(dns_dispatchmgr_t *mgr, const isc_sockaddr_t *localaddr,
 
 	isc_result_t result;
 
-	if ((options & DNS_DISPATCHOPT_FIXEDID) == 0) {
+	if ((options & DNS_DISPATCHOPT_FIXEDID) == 0 &&
+	    disptype != DNS_DISPATCHTYPE_XFRIN)
+	{
 		result = dispatch_gettcp(mgr, localaddr, destaddr, transport,
 					 disptype, dispp);
 		if (result == ISC_R_SUCCESS) {