[dns-operations] solutions for DDoS mitigation of DNS

Davey Song songlinjian at gmail.com
Thu Apr 2 13:29:38 UTC 2020


Usually the commercial DoS mitigation solution require you to put your
service in their network, like the secondary DNS in which you have privacy
concern.

Davey

On Thu, 2 Apr 2020 at 21:15, Tessa Plum <tessa at plum.ovh> wrote:

> On 2020/4/2 7:09 下午, Klaus Darilion wrote:
> >
> > So my advice: use a name server which can fill your upstream bandwith
> > (NSD, Knot ...). And for volumetric attacks use a commercial DDoS
> > mitigation provider which filters your traffic (ie. buy the service from
> > your ISP or from a remote DDoS mitigation provider which announces your
> > prefixes on demand.)
>
> That's really what I am looking for.
> We don't mind to buy a commercial mitigation device to prevent such type
> of attacks.
>
> Thank you.
> Tessa
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/dns-operations/attachments/20200402/c2dd9071/attachment.html>


More information about the dns-operations mailing list