3 ms·

AWS DNS is all kinds of fucked. They have implemented a range of undocumented rate limits both to their own DNS server and to external (!) DNS, presumably to re

by ttul 9y ago

AWS DNS is all kinds of fucked. They have implemented a range of undocumented rate limits both to their own DNS server and to external (!) DNS, presumably to reduce amplification attacks. These things have hobbled our services many times, which rely on making thousands of DNS queries per second.

boulos 9y ago
Can you describe a bit more about what you’re resolving? And by rate-limiting external, are you saying they’re throttling DNS traffic to say 8.8.8.8 as well, or do you mean external as opposed to “internal” in a split horizon sense?
- ttul 9y ago
  This is correct.
otterley 9y ago
I'm curious about your architecture. What requires you to make thousands of DNS queries per second against Route 53?
- merb 9y ago
  if you have thousands of services and use route53 as your internal dns service and use it for service discovery, this could be a problem.
- ttul 9y ago
  We process a great deal of email.