mirror of
				https://github.com/coredns/coredns.git
				synced 2025-10-31 10:13:14 -04:00 
			
		
		
		
	check for two days of remaining validity (#4606)
Signed-off-by: Keith C <keith@fraudmarc.com>
This commit is contained in:
		| @@ -31,7 +31,7 @@ func periodicClean(c *cache.Cache, stop <-chan struct{}) { | |||||||
| 		case <-tick.C: | 		case <-tick.C: | ||||||
| 			// we sign for 8 days, check if a signature in the cache reached 75% of that (i.e. 6), if found delete | 			// we sign for 8 days, check if a signature in the cache reached 75% of that (i.e. 6), if found delete | ||||||
| 			// the signature | 			// the signature | ||||||
| 			is75 := time.Now().UTC().Add(sixDays) | 			is75 := time.Now().UTC().Add(twoDays) | ||||||
| 			c.Walk(func(items map[uint64]interface{}, key uint64) bool { | 			c.Walk(func(items map[uint64]interface{}, key uint64) bool { | ||||||
| 				for _, rr := range items[key].([]dns.RR) { | 				for _, rr := range items[key].([]dns.RR) { | ||||||
| 					if !rr.(*dns.RRSIG).ValidityPeriod(is75) { | 					if !rr.(*dns.RRSIG).ValidityPeriod(is75) { | ||||||
|   | |||||||
| @@ -131,7 +131,7 @@ func (d Dnssec) set(key uint64, sigs []dns.RR) { d.cache.Add(key, sigs) } | |||||||
| func (d Dnssec) get(key uint64, server string) ([]dns.RR, bool) { | func (d Dnssec) get(key uint64, server string) ([]dns.RR, bool) { | ||||||
| 	if s, ok := d.cache.Get(key); ok { | 	if s, ok := d.cache.Get(key); ok { | ||||||
| 		// we sign for 8 days, check if a signature in the cache reached 3/4 of that | 		// we sign for 8 days, check if a signature in the cache reached 3/4 of that | ||||||
| 		is75 := time.Now().UTC().Add(sixDays) | 		is75 := time.Now().UTC().Add(twoDays) | ||||||
| 		for _, rr := range s.([]dns.RR) { | 		for _, rr := range s.([]dns.RR) { | ||||||
| 			if !rr.(*dns.RRSIG).ValidityPeriod(is75) { | 			if !rr.(*dns.RRSIG).ValidityPeriod(is75) { | ||||||
| 				cacheMisses.WithLabelValues(server).Inc() | 				cacheMisses.WithLabelValues(server).Inc() | ||||||
| @@ -154,6 +154,6 @@ func incepExpir(now time.Time) (uint32, uint32) { | |||||||
|  |  | ||||||
| const ( | const ( | ||||||
| 	eightDays  = 8 * 24 * time.Hour | 	eightDays  = 8 * 24 * time.Hour | ||||||
| 	sixDays    = 6 * 24 * time.Hour | 	twoDays    = 2 * 24 * time.Hour | ||||||
| 	defaultCap = 10000 // default capacity of the cache. | 	defaultCap = 10000 // default capacity of the cache. | ||||||
| ) | ) | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user