Post #2281844

@hallam@infosec.exchange I don't think anything in bind9 rate-limits below 1 qps as most of the RRL internals are stored as integer rates per second. If you want to go down as low as 0.05 qps, that might require something custom as my suspicion is that most name servers which implement RRL most likely mimic bind. Obviously you've thought about the false positive risks, so if you do something at these rates it'll be interesting to hear how it works out.