DNS infrastructure is infamous for facilitating reflective amplification attacks. Countermeasures such as server shielding, access control, rate limiting and protocol restrictions have improved the situation, but DNS-based reflective amplification attacks persist. Focusing on the threat vector intr…

The interesting bit is that transparent DNS forwarders can bypass some existing resolver protections and scale reflective amplification attacks through anycast resolver infrastructure. Comments