[dns-operations] solutions for DDoS mitigation of DNS
bortzmeyer at nic.fr
Thu Apr 2 11:37:46 UTC 2020
On Thu, Apr 02, 2020 at 11:05:48AM +0100,
Tony Finch <dot at dotat.at> wrote
a message of 30 lines which said:
> > ACLs in the server are not enough, you also need ingress filtering
> > on the borders of your network, to prevent packets claiming to be
> > from your network to get inside.
> That kind of ingress filtering protects you against DDoSing
> yourself, which maybe the rest of the Internet isn't too bothered
> about :-)
I'm not sure I understand you.
More information about the dns-operations