Document toolboxDocument toolbox

set dns_rrl

Use the set dns_rrl command to configure RRL (Response Rate Limiting) settings for the Grid or members. Changes made using this command are applied immediately to an active DNS resolver, although there could be replication delays for Grid Master configuration of other members. Use the show dns_rrl to view the current RRL settings.

Syntax

set dns_rrl enable
set dns_rrl disable
set dns_rrl [member <hostname> | view <viewname>] [override|inherit]
set dns_rrl [member <hostname> | view <viewname>] [enable|disable]
set dns_rrl [member <hostname> | view <viewname> | grid]

[responses_per_second <number>|disable] [window <number>|default]
[slip <number>|default|disable] [logging enable|disable|default]
[log_only true|false|default]


Note: The set dns_rrl command accepts the member, view, and grid options only on the Grid Master.


ArgumentDescription
enable Enable RRL with previously configured values.
disable Disable RRL
member <hostname> The FQDN of the Grid member.
view <viewname> The name of the DNS view.
override|inherit For a Grid member, specify whether you want to override the Grid RRL settings or inherit them from the Grid.
responses_per_second <number> The number of DNS responses per second for the RRL. Valid values are from 1 to 1000. Although the BIND default is 0, which means there is no limit or RRL is disabled, you cannot set this to 0 in NIOS. Use the “disable” argument to disable this feature. The default is 100.
window <number>|default A rolling window of time (in seconds) within which DNS responses are tracked. Valid values are from 1 to 3600 seconds. The default is 15 seconds.
slip <number>|default|disable The number of UDP requests that the appliance skips before answering with a truncated response. For example, if you set the slip number to 2, the appliance responds to every other UDP request.
Valid numbers are from 0 to 10. The appliance does not “slip” if the number is set to 0. The default is 2.
logging
enable|disable|default
Enable or disable the logging of RRL events to the “rate-limit” logging category in syslog. This is enabled by default; however, RRL events are logged to the “rate-limit” category only if RRL is enabled. Note that inheritance for logging categories applies; therefore, you must explicitly override Grid logging categories on a member for changes to the member logging setting to take effect. You cannot use the dns_rrl override command to override logging configuration for a member. Changes made to this setting require a service restart.
log_only true|false|default Set this to true to test the RRL settings without dropping any requests. Set this to false to enable RRL. The default is false.


Examples

Configure the Grid RRL settings on the Grid Master

Infoblox > set dns_rrl responses_per_second 100 log_only false window default slip 2 logging disable


Note: You can also execute the above command on a Grid member to change the RRL settings for that member.


Override the Grid RRL settings on a Grid member

Infoblox > set dns_rrl corp100.com override responses_per_second 300 log_only false window 200 slip 3

Inherit the Grid RRL settings on a Grid member

Infoblox > set dns_rrl corp100.com inherit