Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm using a version of bind with the rate-limiting patch, and I want my DNS server to rate-limit requests according to this scheme:

  • >=5/sec: drop and slip alternate requests
  • >=20/sec: drop all requests

Working from the draft documentation, I have the following rate-limit stanza in my bind config:

rate-limit {
    responses-per-second 5;
    all-per-second 20;

I see requests being slipped and dropped by the responses-per-second directive, but when rates increase beyond 20/sec I expect them all to be dropped. However, this doesn't happen, and the all-per-second directive seems to be ignored.

Is it possible to mix these two modes in this way, or have I completely misunderstood how rate-limiting works?

share|improve this question
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.