]> git.ipfire.org Git - thirdparty/bind9.git/commit
Disable NSEC Aggressive Cache (synth-from-dnssec) by default
authorOndřej Surý <ondrej@sury.org>
Mon, 28 Oct 2019 20:04:38 +0000 (15:04 -0500)
committerOndřej Surý <ondrej@sury.org>
Tue, 29 Oct 2019 10:14:34 +0000 (05:14 -0500)
commitb97004be30ecf69cc4e26bd72212f6259e05f4c8
treebfb2514b2948db33e648d9efab0222243cb300ca
parent4fb9ef674fc9c5b2d017e2a5aceaaa19a8ec813a
Disable NSEC Aggressive Cache (synth-from-dnssec) by default

It was found that NSEC Aggressive Caching has a significant performance impact
on BIND 9 when used as recursor.  This commit disables the synth-from-dnssec
configuration option by default to provide immediate remedy for people running
BIND 9.12+.  The NSEC Aggressive Cache will be enabled again after a proper fix
will be prepared.

(cherry picked from commit a20c42dca68737ca341bd24fff403cf5c7940aa1)
bin/named/config.c
doc/arm/Bv9ARM-book.xml