DNS Infrastructure & Naming Conventions
The story of a little DNS easter egg

The story of a little DNS easter egg

8/27/2013 · Matthew Prince

What this post added

This post details the replacement of PowerDNS with a custom-built authoritative name server called RRDNS. RRDNS was developed to address challenges with DDoS load handling, abuse detection, and rate limiting that were encountered with PowerDNS. The post highlights RRDNS's modular framework, which allows for the easy addition of application logic, exemplified by the implementation of DNS 'Easter Eggs' that query job listings and 'whois' information. It also describes the security safeguards implemented to prevent these features from being used in DNS reflection attacks, specifically by forcing TCP retries for certain queries.

Read the original post ↗