| A denial of service (DoS) attack against the DNS infrastructure has the potential to cause a denial of service to all network users. As the DNS is a distributed backbone service of the Internet, various forms of attacks resulting in DoS, are still prevalent on the Internet today. Without the DNS, users and systems would not have the ability to perform simple name to IP resolution.
Configuring the DNS server to defend against cache poisoning, employing increased capacity and bandwidth, building redundancy into the DNS architecture, the use of ""authoritative-only"" name servers, limiting and securing recursive services and TCP concurrent clients, etc., may reduce the susceptibility to some DoS attacks. |
