DDoS Defense Module for BIND DNS -- RRL, 21 August 2013

Eddy Winstead presents on RRL, or Response Rate Limiting, a powerful tool for combating DNS amplification attacks. RRL will be available in ISC's BIND 9.9.4 -- scheduled for release around the end of July/early August. At this time, RRL deployment is currently recommended only for authoritative servers. In addition to the basic RRL configuration demo, Suzanne Woolf, Director of Strategic Partnerships, shares a teaser on DNSco's latest feature, RRL Classifier. Learn about Inline Signing with hosts Larissa Shapiro and Michael Graff. Inline Signing simplifies the DNSSEC deployment process and streamlines existing implementations by offering total automation of DNSSEC zone signing. You are welcome to post your questions about BIND 9 DNS on our helpful community mailing list at https://lists.isc.org/mailman/listinf.... The BIND Administrative Reference Manual is online at https://bind9.readthedocs.io/en/stable/. We also maintain a knowledgebase of handy technical articles at https://kb.isc.org. Internet Systems Consortium maintains and publishes the BIND 9 DNS software under the open source MPL 2.0 license. ISC is a non-profit, operating to help support the Internet infrastructure and facilitate independent connection to and participation in the Internet. We support this work by offering users professional technical support contracts, including advance notification of security vulnerabilities before public disclosure. --- Learn more at https://www.isc.org