Skip to content
  • Witold Kręcicki's avatar
    Jitter signatures times when adding dynamic records. · 662d10cb
    Witold Kręcicki authored and Matthijs Mekking's avatar Matthijs Mekking committed
    When doing regular signing expiry time is jittered to make sure
    that the re-signing times are not clumped together. This expands
    this behaviour to expiry times of dynamically added records.
    
    When incrementally re-signing a zone use the full jitter range if
    the server appears to have been offline for greater than 5 minutes
    otherwise use a small jitter range of 3600 seconds.  This will stop
    the signatures becoming more clustered if the server has been off
    line for a significant period of time (> 5 minutes).
    
    (cherry picked from commit 6b2fd402)
    662d10cb