ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

[master] servfail cache

Browse Source 
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
This commit is contained in:
Evan Hunt
2014-09-03 23:28:14 -07:00
parent bb70b45c1f
commit a878301981
34 changed files with 1355 additions and 390 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
bin/tests/system/sfcache/README Normal file
View File

@@ -0,0 +1,11 @@
Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
See COPYRIGHT in the source root or http://isc.org/copyright.html for terms.
The test setup for the SERVFAIL ncache tests has a secure root.
ns1 is the root server.
ns2 is an authoritative server for the various test domains.
ns5 is a caching-only server, configured with the an incorrect trusted
key for the root. It is used for testing failure cases.