Hi Abubin,
On 1/14/20 10:12 AM, abubin . wrote:
> I have been using pdns for a year now. It is mainly used for our
> internal LAN. Recently due to security compliance, we need to set rate
> limit to queries. A quick search found that we need to use LUA script
> for rate limit in pdns. Just wondering is this still the case or new
> version of pdns already have built-in rate limit?
The easiest way (imho) is using dnsdist[1]. You can use the
MaxQPSIPRule[2] to limit QPS per address or netmask:
addAction(MaxQPSIPRule(5), DropAction())
This would drop all traffic from each address that sends more than 5 QPS.
Best regards,
Pieter
1 - https://dnsdist.org
2 - https://dnsdist.org/rules-actions.html?highlight=maxqps#MaxQPSIPRule
--
Pieter Lexis
PowerDNS.COM BV -- https://www.powerdns.com
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
