Hi all,
I migrated from bind to knot. Everything works fine, except rrl.
I "translated" the bind config

rate-limit {
                responses-per-second 5;
                window 5;
};

to

mod-rrl:
  - id: default
    rate-limit: 5
    slip: 2           # Every other response slips

template:
  - id: default
    storage: "/etc/knot/zones"
    timer-db: "/var/lib/knot/timers"
    semantic-checks: on
    global-module: mod-rrl/default

But the limiting doesn't work. I testet with

for i in {1..20}; \
 do dig @ns +short +tries=1 +time=1 mydomain.de a; \
done

And got 20 answers quickly.
Any ideas what's wrong here?
(I'm unsing ver 2.7.6 @Debian 10)

Best regards,
Thomas.
--
https://lists.nic.cz/mailman/listinfo/knot-dns-users

Reply via email to