[ratelimits] How to validate the use of RRL?

Vernon Schryver vjs at rhyolite.com
Wed Nov 7 06:27:04 UTC 2012


> From: Feng He <fenghe at nsbeta.info>

>       rate-limit {
>           responses-per-second 25;
>           window 5;
>       };

> for i in `seq 0 9`;do dig @localhost +short +tries=1 +time=1 dnsbed.com a;done

I think that shell line will send 10 DNS requests, but the RRL limit
is set to 25 responses/second.  I would try 

   for i in `seq 0 51`;do ...

I would also enable and examine the BIND logs.


Vernon Schryver    vjs at rhyolite.com


More information about the ratelimits mailing list