3 commits

Author	SHA1	Message	Date
Ondřej Surý	32af7299eb	Add a limit to the number of RRs in RRSets ... Previously, the number of RRs in the RRSets were internally unlimited. As the data structure that holds the RRs is just a linked list, and there are places where we just walk through all of the RRs, adding an RRSet with huge number of RRs inside would slow down processing of said RRSets. Add a configurable limit to cap the number of the RRs in a single RRSet. This is enforced at the database (rbtdb, qpzone, qpcache) level and configured with new max-records-per-type configuration option that can be configured globally, per-view and per-zone.	2024-06-10 16:55:07 +02:00
Aram Sargsyan	d28fd93a58	Use trust anchors with 'dnssec-validation yes' in system tests ... Explicitly use an empty 'trust-anchors' statement in the system tests where it was used implicitly before. In resolver/ns5/named.conf.in use the trust anchor in 'trusted.conf', which was supposed to be used there.	2024-02-02 19:54:09 +00:00
Artem Boldariev	10e626111f	doth test: add a secondary NS instance that reuses a 'tls' entry ... This commit extends the 'doth' system tests with additional secondary NS instance that reuses the same 'tls' entry for connecting the the primary to download zones. This configurations were known to crash secondaries in some cases.	2023-12-06 16:01:20 +02:00