From 7214833ecc741164ad9e1bf40ebc107270f45a1a Mon Sep 17 00:00:00 2001 From: Markus Hauschild Date: Mon, 6 Sep 2021 13:37:55 +0200 Subject: [PATCH] dns_resolver: fix sending TC on TCP connections --- roles/dns_resolver/templates/dnsdist.conf.j2 | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/roles/dns_resolver/templates/dnsdist.conf.j2 b/roles/dns_resolver/templates/dnsdist.conf.j2 index ab82d99..4f73020 100644 --- a/roles/dns_resolver/templates/dnsdist.conf.j2 +++ b/roles/dns_resolver/templates/dnsdist.conf.j2 @@ -5,10 +5,9 @@ addLocal('::1') addLocal('{{ ansible_default_ipv4.address }}') addLocal('{{ ansible_default_ipv6.address }}') -addACL('0.0.0.0/0') -addACL('::/0') +setACL({'0.0.0.0/0', '::/0'}) -addAction(MaxQPSIPRule(5), TCAction()) +addAction(AndRule({TCPRule(false), MaxQPSIPRule(10)}), TCAction()) newServer({address='127.0.0.1:5353', name='localhost'})