[Pdns-users] DNS amplification attack advice

[kalpesh thaker]

On 29/05/2012 18:29, Peter Gervai wrote:
>
> By the way what amount of traffic you're observing?
>
> g
>

Its a little difficult to say exactly, but from the traffic logs i 
saw... it was close to 2.5Mbps at its peak, and that was only on the 
primary.
generally when i used the built-in PDNS webserver (when i could get to 
it), i observed an average of around 590-580 queries per second
during a 3 hour period yesterday between the master and the slaves, with 
a peak of 650. at that stage, AFXR transactions were not
working between the master and slaves.

The last 12 hours have been much better though...i think the firewall 
chains i've setup have managed to restrain alot of incoming DOS traffic.
Google and OpenDNS are managing to recurse our zones ok..so the 
situation is looking much better.