bind9/doc
Ondřej Surý c1ba80169c
Introduce max-delegation-servers configuration option
Make the maximum number of processed delegation nameservers configurable
via the new 'max-delegation-servers' option (default: 13), replacing the
hardcoded NS_PROCESSING_LIMIT (20).

The default is reduced to 13 to precisely match the maximum number of
root servers that can fit into a classic 512-byte UDP payload.  This
provides a natural, historically sound cap that mitigates resource
exhaustion and amplification attacks from artificially inflated or
misconfigured delegations.

The configuration option is strictly bounded between 1 and 100 to ensure
resolver stability.
2026-03-04 16:13:49 +01:00
..
arm Introduce max-delegation-servers configuration option 2026-03-04 16:13:49 +01:00
changelog Generate changelog for BIND 9.21.19 2026-02-26 21:17:47 +01:00
design Remove DLV remnants 2024-12-13 11:24:47 +01:00
dev Change the loopmgr to be singleton 2025-07-23 22:44:16 +02:00
dnssec-guide replace the build system with meson 2025-06-11 10:30:12 +03:00
doxygen Remove trailing whitespace from all text files 2023-06-13 15:05:40 +02:00
man Remove superfluous 'pylint: disable' directives 2026-02-20 15:17:32 +01:00
misc Introduce max-delegation-servers configuration option 2026-03-04 16:13:49 +01:00
notes Add release note for GL !11563 2026-02-26 21:17:47 +01:00
meson.build Fix cross builds 2025-07-10 16:56:15 +02:00