DNS - connection limit (without any extra hardware)
very.luke at gmail.com
Mon Dec 11 16:15:09 UTC 2006
>I use to slave "." which can save time on recursive DNS servers when they
>a lot of dross to answer (assuming it is totally random dross).
I'm not sure to understand your solution.
You configure your name-server as a slave-root-server?
On 12/8/06, Simon Waters <simonw at zynet.net> wrote:
> On Friday 08 December 2006 14:40, you wrote:
> > For this reason, I would like that a DNS could response maximum to 10
> > queries per second given by every single Ip address.
> That may trap an email server or two.
> Did you consider checking what they are looking up, and lying to them
> the TTL/answer "127.0.0.1 for a week" maybe better than NXDOMAIN.
> I use to slave "." which can save time on recursive DNS servers when they
> a lot of dross to answer (assuming it is totally random dross).
> I suspect complex rate limiting may be nearly as expensive as providing
> answers with Bind9.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the NANOG