[nsd-users] concepts against amplification using dnssec

Jan-Piet Mens jpmens.dns at gmail.com
Thu Jan 17 13:21:19 CET 2013


> He told me that there is an other method preferred by the nsd developer.
> It's called "Response Rate Limiting".

I think you're probably looking for [1], which is (loosely) based on the
RRL patches for BIND9.

        -JP

[1] http://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/


More information about the nsd-users mailing list