How to stop the traffic attack to nameserver

sthaug at nethelp.no sthaug at nethelp.no
Sat Dec 10 15:28:14 UTC 2011


> >> My name servers have got many times of traffic attack.
> >> When the large bulk of traffic is delivered to nameserver, the server
> >> is almost dead.
> >> For example, the attacking traffic was more than 2G to a single host sometime.
> >
> > Are these your authoritative or your recursive name servers? These are
> > different services and should run on different hosts.
> >
> 
> I am running the DNS hosting service.
> All the nameservers are authoritative.

You may want to investigate some of Roland Dobbins' presentations on
how to protect your infrastructure. Googling "roland dobbins protecting
dns servers" gives several relevant hits.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no



More information about the bind-users mailing list