1. 09 Jul, 2015 1 commit
    • Evan Hunt's avatar
      [master] DDoS mitigation features · 1479200a
      Evan Hunt authored
      3938.	[func]		Added quotas to be used in recursive resolvers
      			that are under high query load for names in zones
      			whose authoritative servers are nonresponsive or
      			are experiencing a denial of service attack.
      
      			- "fetches-per-server" limits the number of
      			  simultaneous queries that can be sent to any
      			  single authoritative server.  The configured
      			  value is a starting point; it is automatically
      			  adjusted downward if the server is partially or
      			  completely non-responsive. The algorithm used to
      			  adjust the quota can be configured via the
      			  "fetch-quota-params" option.
      			- "fetches-per-zone" limits the number of
      			  simultaneous queries that can be sent for names
      			  within a single domain.  (Note: Unlike
      			  "fetches-per-server", this value is not
      			  self-tuning.)
      			- New stats counters have been added to count
      			  queries spilled due to these quotas.
      
      			See the ARM for details of these options. [RT #37125]
      1479200a
  2. 08 Jul, 2015 4 commits
  3. 07 Jul, 2015 9 commits
  4. 06 Jul, 2015 4 commits
  5. 05 Jul, 2015 2 commits
  6. 04 Jul, 2015 1 commit
  7. 03 Jul, 2015 3 commits
  8. 01 Jul, 2015 3 commits
  9. 30 Jun, 2015 3 commits
  10. 29 Jun, 2015 6 commits
  11. 26 Jun, 2015 1 commit
  12. 25 Jun, 2015 3 commits