Existem normalmente limites de taxa para consultar o DNS? [fechadas]

8

Existem normalmente limites de taxa para consultar o DNS? Se eu quiser perguntar 8.8.8.8 para cerca de 30k consultas, com que lentidão devo fazer os pedidos para não causar ou entrar em apuros?

Eu pesquisei limites de taxa em consultas do DNS, mas não estou encontrando nenhum resultado relevante.

    
por Jason Kleban 13.03.2014 / 21:07

1 resposta

8

O Google faz response rate limiting em seus servidores DNS.

Você pode ver suas informações completas aqui: link

Google Public DNS implements two kinds of rate control:

  • Rate control of outgoing requests to other nameservers. To protect other DNS nameservers against DoS attacks that could be launched from our resolver servers, Google Public DNS enforces per-nameserver QPS limits on outgoing requests from each serving cluster.
  • Rate control of outgoing responses to clients. To protect any other systems against amplification and traditional distributed DoS (botnet) attacks that could be launched from our resolver servers, Google Public DNS performs two types of rate limiting on client queries: To protect against traditional volume-based attacks, each server
    imposes per-client-IP QPS and average bandwidth limits. To guard against amplification attacks, in which large responses to small queries are exploited, each server enforces a per-client-IP maximum average amplification factor. The average amplification factor is a configurable ratio of response-to-query size, determined from historical traffic patterns observed in our server logs.

    If queries from a specific source IP address exceed the maximum QPS, or exceed the average bandwidth or amplification limit consistently (the occasional large response will pass), we return (small) error responses or no response at all.

    
por 13.03.2014 / 21:15