Rate-limiting in nsd?

NSD
1

People are proposing rate-limiting built into BIND, to defend against
some DoS attackes (a proposal
<http://fanf.livejournal.com/122111.html&gt; and its implementation
<https://github.com/fanf2/bind-9/blob/master/doc/misc/ratelimiting&gt;\).

What is the current thinking for NSD? (It is a truly open question, do
not take it as "this guy requires rate-limiting in NSD".)

2

Use iptables?

-Bryan

3

a message of 49 lines which said:

Use iptables?

There are many things you cannot do with iptables. Typical example:
limiting only ANY requests (before you say it's possible, try it).