Squashed commit of the following:
commit 73f0bba7d8d4763763ff88731c739ac646714ac8
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jul 13 05:40:35 2015 +0530
Update rndc usage output
This is based on a patch sent by Tony Finch.
Squashed commit of the following:
commit 77f12b02cf4e81f13e10db3cfac90e9de0b53928
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jul 13 05:28:13 2015 +0530
Some tweaks
commit 9c521020b03c2fe7293ec4c970225fff479efd40
Author: Tony Finch <dot@dotat.at>
Date: Thu Jul 9 15:36:15 2015 +0100
rndc addzone error reporting improvements
Clearer error messages from rndc addzone and modzone when the view is not
known or when allow-new-zones is off.
Also, remove a spurious newline from the delzone response.
4161. [test] Add JSON test for traffic size stats; also test
for consistency between "rndc stats" and the XML
and JSON statistics channel contents. [RT #38700]
3938. [func] Added quotas to be used in recursive resolvers
that are under high query load for names in zones
whose authoritative servers are nonresponsive or
are experiencing a denial of service attack.
- "fetches-per-server" limits the number of
simultaneous queries that can be sent to any
single authoritative server. The configured
value is a starting point; it is automatically
adjusted downward if the server is partially or
completely non-responsive. The algorithm used to
adjust the quota can be configured via the
"fetch-quota-params" option.
- "fetches-per-zone" limits the number of
simultaneous queries that can be sent for names
within a single domain. (Note: Unlike
"fetches-per-server", this value is not
self-tuning.)
- New stats counters have been added to count
queries spilled due to these quotas.
See the ARM for details of these options. [RT #37125]
Mark Andrews
Tinderbox User
Mukund Sivaraman
Evan Hunt