[dns-operations] Resolvers seeing repeated bursts of identical queries
Paul Vixie
paul at redbarn.org
Mon Jan 9 20:18:05 UTC 2023
if the same IP is asking the same qname over and over, then you might
want to look into DNS RRL, which was originally a BIND thing but which
all open source name servers now possess in some form. it was crafted
for authority (really, root and TLD) servers, but does also work for
recursives.
http://www.redbarn.org/dns/ratelimits
(i guess i'll go fix the https version of that service, again.)
vixie
More information about the dns-operations
mailing list