On Jan 2, 2014, at 8:09 PM, Gert Doering <[email protected]> wrote:
> I would strongly recommend *against* doing stateful anything in front of a > DNS server. It won't serve a useful function (as unbound etc. are > quite good in recognizing "real" responses vs. "fake"), but serves as an > additional chokepoint which might run into overload far before your > servers die. Concur 100%: <https://app.box.com/s/a3oqqlgwe15j8svojvzl> ----------------------------------------------------------------------- Roland Dobbins <[email protected]> // <http://www.arbornetworks.com> Luck is the residue of opportunity and design. -- John Milton
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
