[c-nsp] rate limit dns

[Dobbins, Roland]

On Jan 3, 2014, at 12:17 AM, Mack McBride <mack.mcbride at viawest.com> wrote:

> The big problem with DDoS is pipe filling anyway, not CPU load.

That's entirely subjective and varies from attack to attack, FYI.

And to be carify, the issue with putting stateful anything in front of servers isn't primarily CPU load (although it certainly can be a factor), but rather state-table memory exhaustion.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton