Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

Reporting

Reply

Alert when Queries Per Second reaches a threshold
stevenwmn
Techie
Posts: 12

‎07-21-2022 06:39 AM

1418     1

I would like to have Infoblox send me an email when QPS on my external DNS resolvers spike. We currently have less than 50 QPS but we have been hit by DDoS attacks where QPS goes to 3000 QPS, how can I have infoblox altert me when QPS is at 1000?

 

Thank you

Reply
0 Kudos

Re: Alert when Queries Per Second reaches a threshold
aralvidra02
Superuser
Posts: 105

‎08-11-2022 11:08 PM

1418     1

Hi,

 

you can use the reporting to do alerting but you need to tweak some search about the query per second and make the search as alert. or you might need the Advance DNS protection to detect and block the ddos queries. Check on this link

 

https://www.infoblox.com/wp-content/uploads/infoblox-solution-note-infoblox-advanced-dns-protection....

 

Thanks

Reply
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Recommended for You

Latest Annoucements

Infoblox Experts Community

You have reached the maximum number of topics allowed as a visitor. Please Login or Join the community to continue to read.

Join for free

TOPICS REMAINING

Register for unlimited browsing. Registration is FREE.

Join Community