Every device with FB app is now DDoSing recursive DNS resolvers

Re:Every device with FB app is now DDoSing recursive DNS res... by yourad_io on Monday October 04, 2021 @07:22PM (#28753656)

> but now that I learned that SERVFAIL is not cached on [...] intermediate DNS servers [0]

I thought so too, but at least some do cache according to Cloudflare's blog post:

> Consequently, 1.1.1.1, 8.8.8.8, and other major public DNS resolvers started issuing (and caching) SERVFAIL responses.

[ Parent | on HN ]

Re:Every device with FB app is now DDoSing recursive DNS res... by im3w1l on Monday October 04, 2021 @08:17PM (#28754061)

Facebook is so large that even caching the SERVFAIL with a TTL measured in seconds should cut down a lot of traffic.

[ Parent | on HN ]

Re:Every device with FB app is now DDoSing recursive DNS res... by daper on Tuesday October 05, 2021 @03:52AM (#28756556)

As I understand my favorite resolver - unbound - has separate "infra" cache that also caches RTT times, and "down" status of name servers:

[ Parent | on HN ]