dnsdist in front of PowerDNS stops abusive DNS clients cold: per-subnet token buckets, response-size limits, query-type ACLs, dynBlock. Config walkthrough for https://www.valtersit.com/vault/ratelimiting-and-throttling-abusive-clients-with-dnsdist-in--92f62c/
#dnsdist #powerdns #ratelimiting
