Mongrel Alternatives and Similar Software. INN. HAProxy - The Reliable, High Performance TCP/HTTP Load Balancer. Squid : Optimising Web Delivery. DHCP. BIND. An authoritative DNS server answers requests from resolvers, using information about the domain names it is authoritative for. You can provide DNS services on the Internet by installing this software on a server and giving it information about your domain names. The BIND 9 documentation includes a description of the Primary/Secondary/stealth secondary roles for authoritative servers. Response Rate Limiting (RRL) is an enhancement to named to reduce the problem of “amplification attacks” by rate-limiting DNS responses.
This feature is on by default because it has proven to be so effective; it’s now even more effective with DNS Cookies, which focus rate limiting on unknown clients. DNS Cookies, per RFC 7873, are exchanged between client and server to provide IP address identity, helping to prevent attacks using forged IP addresses. Minimal ANY Responses Queries for ANY records are a possible abuse mechanism because they typically extract a response much larger than the query. HSM Support.