[dns-operations] Natting DNS farm behind LB - using priv ip space.

Dobbins, Roland rdobbins at arbor.net
Fri Jun 17 10:48:50 UTC 2011


On Jun 3, 2011, at 10:16 PM, Bob Paolucci wrote:

> This is a pretty open question...


NATting DNS servers (or any other type of server) is a Very Bad Idea - the NAT is a stateful DDoS chokepoint.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

		The basis of optimism is sheer terror.

			  -- Oscar Wilde




More information about the dns-operations mailing list