- Increase the default of max-global-quota to 200 from 128 after

operational feedback. Still keeping the possible amplification factor (CAMP related issues) in the hundreds.
NLnetLabs · Nov 6, 2024 · fd1a1d5 · fd1a1d5
1 parent 3c4b876
commit fd1a1d5
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 3 deletions.
diff --git a/doc/Changelog b/doc/Changelog
@@ -1,3 +1,8 @@
+6 November 2024: Yorgos
+	- Increase the default of max-global-quota to 200 from 128 after
+	  operational feedback. Still keeping the possible amplification
+	  factor (CAMP related issues) in the hundreds.
+
 5 November 2024: Wouter
 	- Fix for the serve expired DNSSEC information fix, it would not allow
 	  current delegation information be updated in cache. The fix allows

diff --git a/doc/example.conf.in b/doc/example.conf.in
@@ -194,7 +194,7 @@ server:
 	# iter-scrub-cname: 11
 
 	# Limit on upstream queries for an incoming query and its recursion.
-	# max-global-quota: 128
+	# max-global-quota: 200
 
 	# msec for waiting for an unknown server to reply.  Increase if you
 	# are behind a slow satellite link, to eg. 1128.

diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in
@@ -1997,7 +1997,7 @@ Default is 11.
 Limit on the number of upstream queries sent out for an incoming query and
 its subqueries from recursion. It is not reset during the resolution. When
 it is exceeded the query is failed and the lookup process stops.
-Default is 128.
+Default is 200.
 .TP 5
 .B fast\-server\-permil: \fI<number>
 Specify how many times out of 1000 to pick from the set of fastest servers.

diff --git a/util/config_file.c b/util/config_file.c
@@ -416,7 +416,7 @@ config_create(void)
 	cfg->ede = 0;
 	cfg->iter_scrub_ns = 20;
 	cfg->iter_scrub_cname = 11;
-	cfg->max_global_quota = 128;
+	cfg->max_global_quota = 200;
 	return cfg;
 error_exit:
 	config_delete(cfg);