named tcp dos?

[Daniel Stirnimann]

On 03.08.18 03:13, Randy Bush wrote:
>> We run about 300 TLD's on our DNS platform and get roughly 5-10% TCP
>> queries.
> 
> that is quite a variance
> 
>> In comparison, we get about 25-30% IPv6 queries.
> 
> wonder how that compares to others

We have slightly less then 25% for IPv6 queries.
And about 4-5% TCP queries.

In our case, the default for "tcp-clients" setting is still good enough.

In BIND 9.9/9.10 it is 100 by default
In BIND 9.11/9.12 it is 150 by default.

If you want the future, you can set it to 200 ;-)

Daniel