bind9/bin
Colin Vidal d85889710b
Add test coverage for nameserver processing limits
Introduce a new system test (nsprocessinglimit) to verify that the
resolver strictly respects outgoing network fetch quotas when presented
with heavily delegated, unresponsive zones.

This test acts as a regression check for the recent Fisher-Yates nameserver
selection refactor.  It sets up an authoritative server delegating a zone
to 23 distinct nameservers (all pointing to unresponsive loopback IPs).

Using dnstap, the test forces a resolution failure and verifies that:
1. The resolver successfully traverses the zone delegation path.
2. The resolver caps the outgoing network queries to the delegated
   nameservers exactly at the processing limit (20 fetches), ensuring
   array boundaries and dynamic fetch quotas are strictly enforced without
   crashing or hanging.

(cherry picked from commit 5274e764c4)
2026-02-26 08:17:23 +01:00
..
check standardize CHECK and RETERR macros 2025-12-03 19:17:20 -08:00
confgen Remove redundant parentheses from the return statement 2024-11-19 14:26:52 +01:00
delv Use const pointer with strchr of const pointer 2026-01-20 06:00:50 +00:00
dig Add examples to the dig man page 2026-02-22 16:21:13 +00:00
dnssec Importing invalid SKR file might overflow the stack buffer 2026-02-24 18:45:41 +00:00
named extends named -T so ADB settings can be tweaked 2026-02-20 18:11:29 +01:00
nsupdate Rename isc_net_getudpportrange() to isc_net_getportrange() 2026-02-20 17:02:45 +01:00
plugins standardize CHECK and RETERR macros 2025-12-03 19:17:20 -08:00
rndc List 'rndc dnssec' arguments in alphabetic order 2026-02-18 14:20:53 +00:00
tests Add test coverage for nameserver processing limits 2026-02-26 08:17:23 +01:00
tools Rename isc_net_getudpportrange() to isc_net_getportrange() 2026-02-20 17:02:45 +01:00
Makefile.am Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00