RFC 5358: Preventing Use of Recursive Nameservers in Reflector Attacks

This document describes ways to prevent the use of default configured recursive nameservers as reflectors in Denial of Service (DoS) attacks. It provides…

Read RFC 5358 on the RFC Editor

Outgoing relationships (6 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 1034: Domain names - concepts and facilities
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 2845: Secret Key Transaction Authentication for DNS (TSIG)
Normative reference — RFC 2671: Extension Mechanisms for DNS (EDNS0)
Normative reference — RFC 2931: DNS Request and Transaction Signatures ( SIG(0)s )

Incoming relationships (3 related RFCs)

Normatively referenced by — RFC 9499: DNS Terminology
Normatively referenced by — RFC 5625: DNS Proxy Implementation Guidelines
Informatively referenced by — RFC 6013: TCP Cookie Transactions (TCPCT)