• Miek Gieben's avatar
    plugin/dnssec: use entire RRset as key input (#4537) · 13cef2ee
    Miek Gieben authored
    * plugin/dnssec: use entire RRset as key input
    
    This uses the entire rrset as input for the hash key; this is to detect
    differences in the RRset and generate the correct signature.
    
    As this would then lead to unbounded growth, we periodically (every 8h)
    prune the cache of old entries. In theory we could rely on the random
    eviction, but it seems nicer to do this in a maintannce loop so that we
    remove the unused ones. This required adding a Walk function to the
    plugin/pkg/cache.
    Signed-off-by: default avatarMiek Gieben <miek@miek.nl>
    
    * Update plugin/dnssec/cache.go
    Co-authored-by: default avatarChris O'Haver <cohaver@infoblox.com>
    Co-authored-by: default avatarChris O'Haver <cohaver@infoblox.com>
    13cef2ee
setup.go 3.22 KB