Re-sign in five minute chunks, rather than five seconds.
authorTony Finch <dot@dotat.at>
Wed, 10 Dec 2014 14:48:37 +0000 (14:48 +0000)
committerTony Finch <dot@dotat.at>
Tue, 28 Jul 2015 21:59:08 +0000 (22:59 +0100)
This should reduce the frequency of little notifies and IXFRs.

lib/dns/zone.c

index 106dfb1..ac6f1f6 100644 (file)
@@ -6200,7 +6200,7 @@ zone_resigninc(dns_zone_t *zone) {
         */
        isc_random_get(&jitter);
        expire = soaexpire - jitter % 3600;
-       stop = now + 5;
+       stop = now + 300;
 
        check_ksk = DNS_ZONE_OPTION(zone, DNS_ZONEOPT_UPDATECHECKKSK);
        keyset_kskonly = DNS_ZONE_OPTION(zone, DNS_ZONEOPT_DNSKEYKSKONLY);