Mark SIG(0) quota settings as experimantal

A different solution in the future might be adopted depending
on feedback and other new information, so it makes sense to mark
these options as EXPERIMENTAL until we have more data.

diff --git a/doc/misc/options b/doc/misc/options
index 0aec7c5deab7ea83aa391c8ddbd5da98c94dfc62..5e5f808704d4aff2939b743f9d9f871113423248 100644 (file)
--- a/doc/misc/options
+++ b/doc/misc/options
@@ -277,8 +277,8 @@ options {
        sig-signing-signatures <integer>;
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ]; // obsolete
-       sig0checks-quota <integer>;
-       sig0checks-quota-exempt { <address_match_element>; ... };
+       sig0checks-quota <integer>; // experimental
+       sig0checks-quota-exempt { <address_match_element>; ... }; // experimental
        sortlist { <address_match_element>; ... }; // deprecated
        stale-answer-client-timeout ( disabled | off | <integer> );
        stale-answer-enable <boolean>;

diff --git a/lib/isccfg/namedconf.c b/lib/isccfg/namedconf.c
index b9f8500d7a484b783791227bd8e7d461618be02c..a69c559f38138955a974a695544f8fde54d21bea 100644 (file)
--- a/lib/isccfg/namedconf.c
+++ b/lib/isccfg/namedconf.c
@@ -1361,8 +1361,9 @@ static cfg_clausedef_t options_clauses[] = {
        { "session-keyalg", &cfg_type_astring, 0 },
        { "session-keyfile", &cfg_type_qstringornone, 0 },
        { "session-keyname", &cfg_type_astring, 0 },
-       { "sig0checks-quota", &cfg_type_uint32, 0 },
-       { "sig0checks-quota-exempt", &cfg_type_bracketed_aml, 0 },
+       { "sig0checks-quota", &cfg_type_uint32, CFG_CLAUSEFLAG_EXPERIMENTAL },
+       { "sig0checks-quota-exempt", &cfg_type_bracketed_aml,
+         CFG_CLAUSEFLAG_EXPERIMENTAL },
        { "sit-secret", NULL, CFG_CLAUSEFLAG_ANCIENT },
        { "stacksize", &cfg_type_size, CFG_CLAUSEFLAG_ANCIENT },
        { "startup-notify-rate", &cfg_type_uint32, 0 },