Deprecating the DNS ANY meta-query type
Mar 6, 2015Marek Majkowski, Ólafur Guðmundsson
Summary
This post announces the deprecation of the DNS ANY meta-query type. Cloudflare will begin responding to ANY queries with a 'Not Implemented' (rcode 4) response in a few weeks. The rationale is that ANY queries are not widely used by legitimate software, are primarily used for debugging, and are often exploited for DNS reflection attacks due to their large response sizes. Deprecating ANY simplifies Cloudflare's DNS server codebase and enhances security by mitigating amplification attacks.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available