Ondřej Surý 57cd34441a Be smarter about refusing to add many RR types to the database ...

Instead of outright refusing to add new RR types to the cache, be a bit
smarter:

1. If the new header type is in our priority list, we always add either
   positive or negative entry at the beginning of the list.

2. If the new header type is negative entry, and we are over the limit,
   we mark it as ancient immediately, so it gets evicted from the cache
   as soon as possible.

3. Otherwise add the new header after the priority headers (or at the
   head of the list).

4. If we are over the limit, evict the last entry on the normal header
   list.

2024-07-01 12:48:51 +02:00

..

include

Implement asynchronous message signature verification

2024-06-10 17:33:10 +02:00

rdata

Only check SVBC alias forms at higher levels

2024-05-07 11:20:49 +10:00

.gitignore

…

acl.c

Convert rwlock in dns_acl to RCU

2023-10-13 14:44:40 +02:00

adb.c

Change the ADB_ENTRY_WINDOW to 60 seconds

2024-04-22 10:36:36 +02:00

badcache.c

…

byaddr.c

…

cache.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

callbacks.c

add setup/commit functions to rdatacallbacks

2024-03-08 15:36:56 -08:00

catz.c

catzs->view should maintain a view reference

2024-05-09 08:17:44 +10:00

client.c

use a thread-local variable to get the current running loop

2024-04-02 10:35:56 +02:00

clientinfo.c

…

compress.c

…

db_p.h

Expand the list of the priority types and move it to db_p.h

2024-07-01 12:47:30 +02:00

db.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

dbiterator.c

…

diff.c

add setup/commit functions to rdatacallbacks

2024-03-08 15:36:56 -08:00

dispatch.c

Always call the TCP dispatch connected callbacks asynchronously

2024-03-04 16:34:14 +01:00

dlz.c

…

dns64.c

…

dnsrps.c

improve node reference counting

2024-03-08 15:36:56 -08:00

dnssec.c

Refactor dns_keystore_directory()

2024-01-25 15:37:40 +01:00

dnstap.c

Emit and read correct DoT and DoH dnstap entries

2024-04-26 16:12:29 +03:00

dnstap.proto

Update the dnstap protobuf definition

2024-04-26 16:08:46 +03:00

ds.c

…

dst_api.c

Merge tag 'v9.19.21'

2024-02-14 13:24:56 +01:00

dst_internal.h

Create keys with PKCS#11 URI instead of object

2024-01-25 14:48:07 +01:00

dst_openssl.h

…

dst_parse.c

…

dst_parse.h

…

dyndb.c

…

ecs.c

…

fixedname.c

…

forward.c

reduce memory consumption of the remaining QP databases

2024-03-14 10:25:07 -07:00

gen.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-02-08 08:01:58 +01:00

geoip2.c

…

gssapi_link.c

…

gssapictx.c

…

hmac_link.c

…

ipkeylist.c

…

iptable.c

Convert manual dns_iptable_{attach,detach} to ISC_REFCOUNT_IMPL

2023-10-13 14:44:40 +02:00

journal.c

…

kasp.c

Move kasp key match function to kasp header

2024-04-19 10:41:04 +02:00

key.c

Use dst_key's directory when writing key files

2024-01-25 14:47:43 +01:00

keydata.c

…

keymgr.c

Move kasp key match function to kasp header

2024-04-19 10:41:04 +02:00

keystore.c

Replace keystore attach/detach with ISC_REFCOUNT_IMPL/ISC_REFCOUNT_DECL

2024-01-25 15:37:40 +01:00

keytable.c

reduce memory consumption of the remaining QP databases

2024-03-14 10:25:07 -07:00

log.c

…

Makefile.am

rename qpdb to qpcache

2024-03-08 15:36:56 -08:00

master.c

Remove infinite loop on ISC_R_NOFILE

2024-05-07 10:01:12 +10:00

masterdump.c

remove unused functions in dns_master

2023-12-06 17:31:38 -08:00

message.c

Require local KEYs for SIG(0) verification

2024-06-10 17:36:45 +02:00

name.c

include the nodenames when calculating memory to purge

2024-04-30 12:50:01 -07:00

nametree.c

get foundname from the node

2024-04-30 12:50:01 -07:00

ncache.c

Use atomic operations to access the trust byte in ncache data

2024-04-17 17:14:34 +02:00

nsec3.c

Don't delete the NSEC3PARAM immediately

2023-12-21 20:12:09 +11:00

nsec.c

…

nta.c

complete removal of isc_loop_current()

2024-04-02 10:35:56 +02:00

openssl_link.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-02-08 08:01:58 +01:00

openssl_shim.c

…

openssl_shim.h

…

opensslecdsa_link.c

Specify key usage to be digital signature

2024-01-25 14:48:07 +01:00

openssleddsa_link.c

…

opensslrsa_link.c

Specify key usage to be digital signature

2024-01-25 14:48:07 +01:00

order.c

…

peer.c

…

private.c

Update the source code formatting using clang-format-17

2023-10-17 17:47:46 +02:00

probes.d

Do not destroy IXFR journal in xfrin_end()

2023-12-20 17:21:14 +01:00

qp_p.h

rename QP-related types to use standard BIND nomenclature

2023-09-28 00:32:39 -07:00

qp.c

Rewrite qp fix_iterator()

2024-05-16 09:49:41 +00:00

qpcache_p.h

rename qpdb to qpcache

2024-03-08 15:36:56 -08:00

qpcache.c

Be smarter about refusing to add many RR types to the database

2024-07-01 12:48:51 +02:00

qpzone_p.h

stub dns_qpmulti-based zone database implementation

2024-03-06 20:57:31 -08:00

qpzone.c

Expand the list of the priority types and move it to db_p.h

2024-07-01 12:47:30 +02:00

rbt-cachedb.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

rbt-zonedb.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

rbt.c

Reduce lock contention during RBTDB tree pruning

2024-02-29 11:23:03 +01:00

rbtdb_p.h

Expand the list of the priority types and move it to db_p.h

2024-07-01 12:47:30 +02:00

rbtdb.c

Be smarter about refusing to add many RR types to the database

2024-07-01 12:48:51 +02:00

rcode.c

…

rdata.c

…

rdatalist.c

…

rdataset.c

…

rdatasetiter.c

…

rdataslab.c

Add a limit to the number of RRs in RRSets

2024-06-10 16:55:07 +02:00

remote.c

…

request.c

Restore dns_requestmgr_shutdown re-entrancy

2024-02-07 09:52:32 +11:00

resconf.c

Address CID 486326: Memory - corruptions (OVERRUN)

2024-02-13 09:21:49 +11:00

resolver.c

Run resolver message signature checking asynchronously

2024-06-10 17:33:11 +02:00

result.c

…

rootns.c

add a compile-time option to select default zone and cache DB

2024-03-06 10:49:02 +01:00

rpz.c

use a thread-local variable to get the current running loop

2024-04-02 10:35:56 +02:00

rriterator.c

…

rrl.c

Update sources to Clang 18 formatting

2024-04-23 13:11:52 +02:00

sdlz.c

dns_name_dupwithoffsets() cannot fail

2024-04-10 22:51:07 -04:00

soa.c

…

ssu_external.c

…

ssu.c

Convert rwlock in dns_acl to RCU

2023-10-13 14:44:40 +02:00

stats.c

Ineffective DbC protections

2023-11-21 14:48:43 +11:00

tests

…

time.c

…

tkey.c

…

transport.c

Integrate TLS cipher suites support into BIND

2024-01-12 13:27:59 +02:00

tsig_p.h

…

tsig.c

Address races in dns_tsigkey_find()

2024-01-05 11:16:12 +01:00

ttl.c

…

update.c

Add checkconf check for signatures-jitter

2024-04-18 09:50:33 +02:00

validator.c

Break out of the switch if we have already reached the quota

2024-04-22 12:32:36 +10:00

view.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

xfrin.c

Create the new database for AXFR from the dns_zone API

2024-05-29 08:30:19 +02:00

zone_p.h

Refactor findzonekeys

2024-01-25 14:48:07 +01:00

zone.c

Log rekey failure as error if too many records

2024-06-10 16:55:12 +02:00

zonekey.c

…

zoneverify.c

Properly build the NSEC/NSEC3 type bit map

2024-05-16 10:27:49 +10:00

zt.c

use dns_qp_getname() where possible

2024-04-30 12:50:01 -07:00