DNS Infrastructure & Naming Conventions
Deprecating the DNS ANY meta-query type

Deprecating the DNS ANY meta-query type

3/6/2015 · Marek Majkowski, Ólafur Guðmundsson

What this post added

This post announces the deprecation of the DNS ANY meta-query type. Cloudflare will begin responding to ANY queries with '4 / Not Implemented' in a few weeks. The rationale includes the lack of legitimate software use cases, security concerns related to DNS reflection attacks (amplification), and the significant complexity ANY queries add to DNS server code, especially with features like load-balancing and geoip. The post notes that only unpatched qmaild and Firefox versions 36.0-36.0.1 were known to issue ANY queries, and Firefox has since reverted this behavior. It also mentions that other operators have disabled or throttled ANY queries with minimal impact.

Read the original post ↗