coredns / rrl

Response Rate Limiting Plugin for CoreDNS
Apache License 2.0
23 stars 21 forks source link

Protect against wildcard flooding #34

Closed chrisohaver closed 2 years ago

chrisohaver commented 2 years ago

This implements the wildcard response earmarking solution per #33. The solution uses metadata to earmark the wildcard synthesized responses, such that the rrl plugin can know whether or not the response was synthesized by a wildcard record. Therefore, the metadata plugin is required for this to work.

This solution is dependent on zone/wildcard metadata to be produced by plugins that can synthesize wildcard responses (PR: coredns/coredns#5308). That PR primarily updates the file plugin, but also to the cache plugin for cached wildcard synthesized responses.

Related #33 (will close once coredns is tagged/released with required fixes)