changeset 198:353652f49cd2 puppet-3.6

Reduce memory footprint of named even more Most domains are looked up once (by fail2ban) so not having it cached isn't a major issue. We just need a resolver.
author IBBoard <dev@ibboard.co.uk>
date Sat, 11 May 2019 09:17:07 +0100
parents 23c4f6a38b57
children 69df692e9c09
files common/named.conf
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/common/named.conf	Mon Apr 22 20:05:30 2019 +0100
+++ b/common/named.conf	Sat May 11 09:17:07 2019 +0100
@@ -28,7 +28,7 @@
 	   reduce such attack surface 
 	*/
 	recursion yes;
-	max-cache-size 150m;
+	max-cache-size 10m;
 
 	dnssec-enable yes;
 	dnssec-validation yes;