[dns-operations] dropping fragmented requests

[David Dowdle]

ATM frame size is 53 octets, which is used by DSL as the transport, so 
theoretically, 80+% of your traffic could be that size.  Seems in Real 
World(tm) packets usually get reassembled, but..


On Fri, 8 Apr 2016, Meleshuk, Vadim wrote:

> Is there any real legitimate scenario requiring IP fragmentation support for requests? Sure, MTU could theoretically be as low as 68 and queries could be longer than that, but does that happen out there?
>
> We received some reflection attack traffic that was fragmented and I was wondering whether it is safe to just drop it altogether.
>
>
-------------- next part --------------
_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs