From: Matthijs Mekking <matthijs@isc.org>
Date: Thu, 5 Dec 2024 15:13:45 +0000 (+0000)
Subject: fix: usr: Fix nsupdate hang when processing a large update
X-Git-Tag: v9.21.4~56
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fa56e0d8b10cbfa76f4e393cbe0ddc5237e73475;p=thirdparty%2Fbind9.git

fix: usr: Fix nsupdate hang when processing a large update

To mitigate DNS flood attacks over a single TCP connection, we throttle the connection when the other side does not read the data. Throttling should only occur on server-side sockets, but erroneously also happened for nsupdate, which acts as a client. When nsupdate started throttling the connection, it never attempts to read again. This has been fixed.

Closes #4910

Merge branch '4910-nsupdate-hangs-when-processing-large-update' into 'main'

See merge request isc-projects/bind9!9709
---

fa56e0d8b10cbfa76f4e393cbe0ddc5237e73475