]> git.ipfire.org Git - thirdparty/bind9.git/commit
fix: usr: Prevent crafted queries from degrading RRL performance 3134-disable-tls-renegotiations
authorOndřej Surý <ondrej@isc.org>
Mon, 4 May 2026 12:58:42 +0000 (14:58 +0200)
committerOndřej Surý <ondrej@isc.org>
Mon, 4 May 2026 12:58:42 +0000 (14:58 +0200)
commitcf18479882818bd2c2accb15f9da94f69cdedf61
treebde53ab8164715c0bd66610bd1e7b5f831844993
parentd12d3b2c0909aa8f5d5f50d4d1935d56e35cbb37
parenta6b7ce29c4cfab2ab1d46f48f21f531d5ffde942
fix: usr: Prevent crafted queries from degrading RRL performance

With response rate limiting enabled, an attacker sending queries from many
spoofed source addresses could steer entries into the same slot of the
internal rate-limit table and slow down query processing on the affected
server. The table now uses a per-process keyed hash so the placement of
entries cannot be predicted or influenced from the network.

Closes #5906

Merge branch '5906-rrl-hash-collision-dos' into 'main'

See merge request isc-projects/bind9!11950