The story of a little DNS easter egg

This post details the replacement of PowerDNS with a custom-built authoritative name server called RRDNS. RRDNS addresses challenges faced by PowerDNS under heavy DDoS loads and limitations in extending its functionality. The post highlights RRDNS's modular framework, which allows for easy integration of application logic, demonstrated by an 'easter egg' feature that dynamically retrieves job listings via a CH record query. A critical safeguard is also described: forcing TCP retries for specific queries to prevent DNS reflection attacks by leveraging TCP's handshake mechanism.