3 ms·
Limiting ANY queries to just TCP would have been a reasonable middle ground, but now Cloudflare has a cleaner codebase and does not have to do any difficult thi
by j0057 8y ago
Limiting ANY queries to just TCP would have been a reasonable middle ground, but now Cloudflare has a cleaner codebase and does not have to do any difficult thinking around what to do with synthetic rrsets in response to ANY queries. Good for Cloudflare!
- majke 8y ago> Limiting ANY queries to just TCP would have been a reasonable middle This was proposed solution, the problem is that in case of attack, against a valid Authoritative service, launched via open resolvers, the open resolvers would just download Gigabits of ANY traffic with TCP. Read about this here: https://fanf.livejournal.com/140566.html https://fanf.livejournal.com/140566.html
- CKN23-ARIN 8y agoThey could have done this locally, just for their authoritative servers, without trying to force their ideas about ANY on the rest of the Internet.