upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-27 12:13:20 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

reduce the max-recursion-queries default to 32

Browse source 
the number of iterative queries that can be sent to resolve a
name now defaults to 32 rather than 100.

(cherry picked from commit 7e3b425dc2)
This commit is contained in:
Evan Hunt 2024-06-25 14:39:58 -07:00
parent bfbc6a6c84
commit a11367ade3
5 changed files with 10 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
bin/named/config.c
View file

@ -174,7 +174,7 @@ options {\n\
max-clients-per-query 100;\n\
max-ncache-ttl 10800; /* 3 hours */\n\
max-recursion-depth 7;\n\
max-recursion-queries 100;\n\
max-recursion-queries 32;\n\
max-stale-ttl 86400; /* 1 day */\n\
message-compression yes;\n\
min-ncache-ttl 0; /* 0 hours */\n\

1
bin/tests/system/reclimit/ns3/named1.conf.in
View file

@ -22,6 +22,7 @@ options {
listen-on-v6 { none; };
servfail-ttl 0;
qname-minimization disabled;
max-recursion-queries 50;
max-recursion-depth 12;
recursion yes;
dnssec-validation yes;

1
bin/tests/system/resolver/ns1/named.conf.in
View file

@ -29,6 +29,7 @@ options {
allow-query {!10.53.0.8; any; };
max-zone-ttl unlimited;
attach-cache "globalcache";
max-recursion-queries 50;
};
server 10.53.0.3 {

9
doc/arm/reference.rst
View file

@ -4690,9 +4690,12 @@ Tuning
:tags: server, query
:short: Sets the maximum number of iterative queries while servicing a recursive query.
This sets the maximum number of iterative queries that may be sent while
servicing a recursive query. If more queries are sent, the recursive
query is terminated and returns SERVFAIL. The default is 100.
This sets the maximum number of iterative queries that may be sent
by a resolver while looking up a single name. If more queries than this
need to be sent before an answer is reached, then recursion is terminated
and a SERVFAIL response is returned to the client. (Note: if the answer
is a CNAME, then the subsequent lookup for the target of the CNAME is
counted separately.) The default is 32.
.. namedconf:statement:: notify-delay
:tags: transfer, zone

2
lib/dns/resolver.c
View file

@ -199,7 +199,7 @@
/* The default maximum number of iterative queries to allow before giving up. */
#ifndef DEFAULT_MAX_QUERIES
#define DEFAULT_MAX_QUERIES 100
#define DEFAULT_MAX_QUERIES 50
#endif /* ifndef DEFAULT_MAX_QUERIES */
/*