[v9_10] add fetchlimit to README

This commit is contained in:
Evan Hunt 2015-08-03 12:49:27 -07:00
parent 1df794dff8
commit bc66dfc5ce

28
README
View file

@ -53,12 +53,34 @@ BIND 9
BIND 9.10.3
BIND 9.10.3 is a maintenance release and addresses bugs
found in BIND 9.10.2 and earlier, as well as the security
flaws described in CVE-2015-4620 and CVE-2015-5477.
It also makes the following new features available:
- New "fetchlimit" quotas are now available for the use of
recursive resolvers that are are under high query load for
domains whose authoritative servers are nonresponsive or are
experiencing a denial of service attack.
+ "fetches-per-server" limits the number of simultaneous queries
that can be sent to any single authoritative server. The
configured value is a starting point; it is automatically
adjusted downward if the server is partially or completely
non-responsive. The algorithm used to adjust the quota can be
configured via the "fetch-quota-params" option.
+ "fetches-per-zone" limits the number of simultaneous queries
that can be sent for names within a single domain. (Note:
Unlike "fetches-per-server", this value is not self-tuning.)
+ New stats counters have been added to count
queries spilled due to these quotas.
NOTE: These features are NOT built in by default; use
"configure --enable-fetchlimit" to enable them.
- Dig now supports sending of arbitary EDNS options by specifying
them on the command line.
This release addresses the security flaws described in
CVE-2015-4620 and CVE-2015-5477.
BIND 9.10.2
BIND 9.10.2 is a maintenance release and addresses bugs