<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Oh yes, how silly of me having missed it...<br>
<br>
For ratelimit-below-domain is there a wildcard syntax eligable, e.g.
<br>
<br>
for second level domain queries = ratelimit-below-domain: .* 2<br>
<br>
or third level domain queries: = ratelimit-below-domain: *.* 1<br>
<br>
The limiting is scaled to seconds (qps) only and there is no option
for a per minute or per hour (or per domain record TTL)?<br>
<br>
I was thinking that a combined logic (ip-ratelimit +
ratelimit-below-domain) per ip-ratelimit-below-domain would be
useful.<br>
<div class="moz-signature"><br>
</div>
<div class="moz-cite-prefix">On 26.11.2018 10:28, Unbound-users
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:fcb9c3f7-7e2a-ab32-1e32-18e6fb6b7fa4@nlnetlabs.nl">
<pre class="moz-quote-pre" wrap="">Hi,
Unbound has ratelimit options for both user query count (ip-ratelimit)
and number of iterative queries under a domain beneath a zone
(ratelimit-below-domain and ratelimit-for-domain). The first is per-IP
address, the second based on domain name. Could set a global number, or
specify the culprit's client-IP or the tunnel service domain name.
Best regards, Wouter
</pre>
</blockquote>
</body>
</html>