/plushcap/analysis/cloudflare/tld-glue-sticks-around-too-long

TLD glue sticks around too long

What's this blog post about?

The recent surge in DDoS attacks has sparked debates within the DNS community about how to strengthen DNS against future attacks. One such proposal involves using an obscure feature of the core DNS protocol, known as DNS TLD glue records with custom TTL values. While this feature is not currently practical for DDoS mitigation due to operator apathy, it could be made more useful with a small tweak. The author argues that adjusting DNS glue TTLs would reduce the recovery time for DNS servers under attack and improve overall resilience against DDoS attacks.

Company
Cloudflare

Date published
Dec. 5, 2016

Author(s)
Marek Majkowski

Word count
1758

Hacker News points
2

Language
English


By Matt Makai. 2021-2024.