[dns-operations] solutions for DDoS mitigation of DNS

Stephane Bortzmeyer bortzmeyer at nic.fr
Thu Apr 2 11:37:46 UTC 2020


On Thu, Apr 02, 2020 at 11:05:48AM +0100,
 Tony Finch <dot at dotat.at> wrote 
 a message of 30 lines which said:

> > ACLs in the server are not enough, you also need ingress filtering
> > on the borders of your network, to prevent packets claiming to be
> > from your network to get inside.
> 
> That kind of ingress filtering protects you against DDoSing
> yourself, which maybe the rest of the Internet isn't too bothered
> about :-)

I'm not sure I understand you.



More information about the dns-operations mailing list