Using the Response Rate Limiting Feature in BIND 9.10

DNS (and bind in particular) is one of those things that most people don't give a second thought to when deploying their infrastructure. "Good enough" is typically where the bar is set.. does it respond to queries?, handle my forwarding/zone looksup? done!

I'm guessing the reason this article was posted, and the feature was added (in 2013 mind you) was due to the malicious way DNS servers have been abused in the last decade, and the recent mentions by bruce schneier around the attacks on global dns infrastructure (perhaps they leverage absuing recursive queries or something? i dont know). It's sort of like BCP38, good net citizens should be doing this, not for their own networks protection, but for everyone else.