bind9/lib/isccfg
Evan Hunt 1479200aa0 [master] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
2015-07-08 22:53:39 -07:00
..
include [master] DDoS mitigation features 2015-07-08 22:53:39 -07:00
win32 [master] DDoS mitigation features 2015-07-08 22:53:39 -07:00
aclconf.c [master] ECS authoritative support 2014-08-28 22:05:57 -07:00
api 150 ->160 2015-05-06 09:24:16 +10:00
dnsconf.c update copyright notice 2009-09-02 23:48:03 +00:00
log.c update copyright notice 2007-06-19 23:47:24 +00:00
Makefile.in update copyrights 2014-09-06 09:38:48 +10:00
namedconf.c [master] DDoS mitigation features 2015-07-08 22:53:39 -07:00
parser.c [master] DDoS mitigation features 2015-07-08 22:53:39 -07:00
version.c update copyright notice 2007-06-19 23:47:24 +00:00