Designate

  1. Series kilo
  2. Bug #1471161
  3. Comment #10

Comment 10 for bug 1471161

Revision history for this message
Kiall Mac Innes (kiall) wrote : Re: Lack of record set size checking leads to denial of service

I've gone and implemented the RRSet related quota enforcement for Master and Kilo, this was not previously implemented. I've included them in this bug, as publishing them now might indicate there's an issue with RRset sizes, but I don't consider them directly part of this DoS vulnerability.

i.e. An operator could choose to have infinite quotas (a valid use case), and we should support that.