...
Using Response Rate Limiting (RRL), the DNS Forward proxy can control excessive UDP responses that are the same or similar. The implementation of RRL in BloxOne Infoblox Threat Defense is enabled by default, cannot be disabled and cannot be configured by users. The RRL ensures that not all of the DNS Forwarding Proxy’s resources are exhausted by a single DNS user. Using RRL, the network infrastructure is protected against DDoS attacks, resulting in no impact or degradation of services.