[nsd-users] concepts against amplification using dnssec

[Jan-Piet Mens]

> He told me that there is an other method preferred by the nsd developer.
> It's called "Response Rate Limiting".

I think you're probably looking for [1], which is (loosely) based on the
RRL patches for BIND9.

        -JP

[1] http://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/