DNS - connection limit (without any extra hardware)

Mon Dec 11 16:15:09 UTC 2006

>I use to slave "." which can save time on recursive DNS servers when they
have
>a lot of dross to answer (assuming it is totally random dross).

I'm not sure to understand your solution.
You configure your name-server as a slave-root-server?

On 12/8/06, Simon Waters <simonw at zynet.net> wrote:
>
> On Friday 08 December 2006 14:40, you wrote:
> >
> > For this reason, I would like that a DNS could response maximum to 10
> > queries per second given by every single Ip address.
>
> That may trap an email server or two.
>
> Did you consider checking what they are looking up, and lying to them
> about
> the TTL/answer "127.0.0.1 for a week" maybe better than NXDOMAIN.
>
> I use to slave "." which can save time on recursive DNS servers when they
> have
> a lot of dross to answer (assuming it is totally random dross).
>
> I suspect complex rate limiting may be nearly as expensive as providing
> DNS
> answers with Bind9.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20061211/b18e5096/attachment.html>