I think it's too big for UDP, it'll renegotiate TCP for anything over a certain size.

thus DNS amplification is impossible because spoofing the TCP source would fail a handshake.