[dns-operations] Resolvers seeing repeated bursts of identical queries

Paul Vixie paul at redbarn.org
Mon Jan 9 20:18:05 UTC 2023


if the same IP is asking the same qname over and over, then you might 
want to look into DNS RRL, which was originally a BIND thing but which 
all open source name servers now possess in some form. it was crafted 
for authority (really, root and TLD) servers, but does also work for 
recursives.

http://www.redbarn.org/dns/ratelimits

(i guess i'll go fix the https version of that service, again.)

vixie



More information about the dns-operations mailing list