Pi-Hole/dnsmasq
1
0
Fork 0
mirror of https://github.com/pi-hole/dnsmasq.git synced 2025-12-19 10:18:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Default --fast-dns-retries on when doing DNSSEC.

Browse Source 
When doing DNSSEC validation, a single downstream query may
trigger many upstream queries. On an unreliable network, there
may not be enough downstream retries to ensure that all these
queries complete.
This commit is contained in:
Simon Kelley
2024-11-24 21:52:39 +00:00
parent 163c05c61d
commit 4ea23f7ea1
2 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/option.c
View File

@@ -6027,6 +6027,15 @@ void read_opts(int argc, char **argv, char *compile_opts)
}
#endif
#ifdef HAVE_DNSSEC
/* Default fast retry on when doing DNSSEC */
if (option_bool(OPT_DNSSEC_VALID) && daemon->fast_retry_time == 0)
{
daemon->fast_retry_timeout = TIMEOUT;
daemon->fast_retry_time = DEFAULT_FAST_RETRY;
}
#endif
/* port might not be known when the address is parsed - fill in here */
if (daemon->servers)
{