A Quantitative Study of the Deployment of DNS Rate Limiting
Casey T. Deccio, Derek Argueta, Jonathan Demke · 2019 International Conference on Computing, Networking and Communications (ICNC) · 2019
As a preventative measure against DDoS attacks, many Domain Name System (DNS) software installations include a configurable rate-limiting feature to dismiss abusive traffic. In this paper we conduct a measurement study of the rate-limiting configurations employed by DNS servers for popular domain names, providing a better understanding of the precautions being taken to protect the DNS infrastructure. We believe that an improved understanding of existing defense mechanisms will allow us to propose improvements to the Internet infrastructure that will ultimately yield a more stable and secure internet.