<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>
</p>
<div class="moz-text-flowed" style="font-family: -moz-fixed;
font-size: 12px;" lang="x-unicode">Dear,
<br>
<br>
I've been testing dnsdist to use it in front of an authoritative
nameserver. We recently had trouble with large amounts of requests
coming in directly on our PowerDNS for random subdomains of one
specific domain name. With dnsdist, if I notice such a situation,
I can manually limit the harm done to other domain names with
something like
<br>
<br>
addQPSLimit("example.org.", 1000)
<br>
<br>
But what would be even nicer, is if this action would happen
automatically once a domain name has gone over a certain amount of
QPS. And I can't seem to find a way to do this. From what I can
find, Dynamic Rule Generation doesn't have a way to check QPS per
domain name.
<br>
<br>
There is an easy way to add a QPS per server or per originating
IP-range, but I can't seem to find a way to limit the QPS
automatically on a per domain name basis.
<br>
<br>
I understand that this is actually not as easy to do as it sounds,
since some domain names are registered on the 3d level. But right
now I would be happy with a way of working similar to
<br>
topQueries(50,2)
<br>
<br>
Yes, that does mean that the whole of .co.uk will need to fit into
the same QPS.
<br>
<br>
Is this possible?
<br>
<br>
Thanks!
<br>
<br>
Sincerely,
<br>
Bart Mortelmans
<br>
<br>
<br>
</div>
</body>
</html>