I was curious how operators of public DNS resolvers, such as Google, prevent themselves from becoming unwitting aids to DNS Amplification attacks. I found this

I was curious how operators of public DNS resolvers, such as Google, prevent themselves from becoming unwitting aids to DNS Amplification attacks. I found this info about Google's resolver: https://developers.google.com/speed/public-dns/docs/security https://developers.google.com/speed/public-dns/docs/security The tl;dr is rate limiting, plus some other techniques like adaptively restricting the ratio of request size to response size.