[Pdns-users] DNSBomb

[Kilian Ries]

@winfried @otto


thanks for your feedback ;)


Regards,

Kilian

________________________________
Von: Pdns-users <pdns-users-bounces at mailman.powerdns.com> im Auftrag von Winfried via Pdns-users <pdns-users at mailman.powerdns.com>
Gesendet: Montag, 3. Juni 2024 19:34:56
An: All about using and deploying powerdns
Cc: Winfried
Betreff: Re: [Pdns-users] DNSBomb



Hello Kilian,

>> Are there any recommended settings for auth or dnsdist for mitigation such attacks?

>When using dnsdist before a recursor, you could apply client rate limiting
>to further protect against this and similar attacks.

see

https://dnsdist.org/guides/dynblocks.html
https://dnsdist.org/advanced/qpslimits.html

for some documentation and examples.

Winfried
_______________________________________________
Pdns-users mailing list
Pdns-users at mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20240605/6833f5f0/attachment.htm>