]> git.ipfire.org Git - thirdparty/bind9.git/commit
Bound the amount of work performed for delegations
authorMichał Kępień <michal@isc.org>
Tue, 6 Sep 2022 11:36:44 +0000 (13:36 +0200)
committerMichal Nowak <mnowak@isc.org>
Wed, 21 Dec 2022 15:08:37 +0000 (16:08 +0100)
commit9e2b882df83b2b3b34c8f7e18b353f10cf57833f
treea5c861558b260eb8abfeb97fc6b1e631c3846621
parent5fb4f32ecb447b6e09b170afb6a83931fc7e7597
Bound the amount of work performed for delegations

Limit the amount of database lookups that can be triggered in
fctx_getaddresses() (i.e. when determining the name server addresses to
query next) by setting a hard limit on the number of NS RRs processed
for any delegation encountered.  Without any limit in place, named can
be forced to perform large amounts of database lookups per each query
received, which severely impacts resolver performance.

The limit used (20) is an arbitrary value that is considered to be big
enough for any sane DNS delegation.
lib/dns/resolver.c