Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm using a version of bind with the rate-limiting patch, and I want my DNS server to rate-limit requests according to this scheme:

  • >=5/sec: drop and slip alternate requests
  • >=20/sec: drop all requests

Working from the draft documentation, I have the following rate-limit stanza in my bind config:

rate-limit {
    responses-per-second 5;
    all-per-second 20;
};

I see requests being slipped and dropped by the responses-per-second directive, but when rates increase beyond 20/sec I expect them all to be dropped. However, this doesn't happen, and the all-per-second directive seems to be ignored.

Is it possible to mix these two modes in this way, or have I completely misunderstood how rate-limiting works?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.