[nsd-users] concepts against amplification using dnssec

Jan-Piet Mens jpmens.dns at gmail.com
Thu Jan 17 12:21:19 UTC 2013

> He told me that there is an other method preferred by the nsd developer.
> It's called "Response Rate Limiting".

I think you're probably looking for [1], which is (loosely) based on the
RRL patches for BIND9.


[1] http://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/

More information about the nsd-users mailing list