summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDaniel Salzman <daniel.salzman@nic.cz>2024-12-02 20:52:32 +0100
committerDaniel Salzman <daniel.salzman@nic.cz>2024-12-03 11:22:49 +0100
commitbf53d71c41fab7f2d4824a24a220ca6a379c5171 (patch)
tree5945043352edd341cc32d536718566ba05bc1c81
parentmod-rrl: add note about limiting of authorized requests (diff)
downloadknot-bf53d71c41fab7f2d4824a24a220ca6a379c5171.tar.xz
knot-bf53d71c41fab7f2d4824a24a220ca6a379c5171.zip
mod-rrl: increase default limits
-rw-r--r--src/knot/modules/rrl/rrl.c6
-rw-r--r--src/knot/modules/rrl/rrl.rst6
2 files changed, 6 insertions, 6 deletions
diff --git a/src/knot/modules/rrl/rrl.c b/src/knot/modules/rrl/rrl.c
index 9fcb8724d..162eb8875 100644
--- a/src/knot/modules/rrl/rrl.c
+++ b/src/knot/modules/rrl/rrl.c
@@ -30,10 +30,10 @@
#define MOD_DRY_RUN "\x07""dry-run"
const yp_item_t rrl_conf[] = {
- { MOD_INST_LIMIT, YP_TINT, YP_VINT = { 1, (1ll << 32) / 768 - 1, 50 } },
- { MOD_RATE_LIMIT, YP_TINT, YP_VINT = { 0, ((1ll << 32) / 768 - 1) * 1000, 20 } },
+ { MOD_INST_LIMIT, YP_TINT, YP_VINT = { 1, (1ll << 32) / 768 - 1, 125 } },
+ { MOD_RATE_LIMIT, YP_TINT, YP_VINT = { 0, ((1ll << 32) / 768 - 1) * 1000, 50 } },
{ MOD_T_INST_LIMIT, YP_TINT, YP_VINT = { 1, 1000000, 5000 } },
- { MOD_T_RATE_LIMIT, YP_TINT, YP_VINT = { 0, 1000000000, 4000 } },
+ { MOD_T_RATE_LIMIT, YP_TINT, YP_VINT = { 0, 1000000000, 5000 } },
{ MOD_SLIP, YP_TINT, YP_VINT = { 0, 100, 1 } },
{ MOD_TBL_SIZE, YP_TINT, YP_VINT = { 1, INT32_MAX, 524288 } },
{ MOD_WHITELIST, YP_TNET, YP_VNONE, YP_FMULTI },
diff --git a/src/knot/modules/rrl/rrl.rst b/src/knot/modules/rrl/rrl.rst
index 1dd2bc67d..04c37edad 100644
--- a/src/knot/modules/rrl/rrl.rst
+++ b/src/knot/modules/rrl/rrl.rst
@@ -105,7 +105,7 @@ sending many queries once a second or even a larger timespan leads to a more str
Set to 0 to disable the rate limiting.
-*Default:* ``20``
+*Default:* ``50``
.. _mod-rrl_instant-limit:
@@ -124,7 +124,7 @@ is periodically lowered.
The :ref:`mod-rrl_instant-limit` may be at least :ref:`mod-rrl_rate-limit` **/ 1000**, at which point the
counters are zeroed each millisecond.
-*Default:* ``50``
+*Default:* ``125``
.. _mod-rrl_slip:
@@ -172,7 +172,7 @@ consumed (in microseconds) by the remote over non-UDP transport protocols.
Set to 0 to disable the time limiting.
-*Default:* ``4000`` (microseconds)
+*Default:* ``5000`` (microseconds)
.. _mod-rrl_time-instant-limit: