Name server proxies (Was: Re: [SURBL-Discuss] Openrbl.org)

[Jeff Chan]

On Friday, April 16, 2004, 3:57:59 PM, David Coulson wrote:
> Jeff Chan wrote:
>> However, does anyone think that using proxies to the real SURBL
>> name servers might be useful to us....  (or know how to set that
>> up?)

> What exactly are you wanting to do? Are you trying to have Tier 1 and 
> Tier 2 servers, where the 2nd level servers will cache the information 
> and cut some of the load from the top level systems?

Hi David,
I think what they're doing is setting up proxy servers to be
the publically listed web servers, where those proxies in turn
forward the web requests and traffic to and from the real
servers, thus providing some protection against attack.

Am I reading this correctly?

> The website openrbl.org:
...
>     * is NOT operated at the addresses published via DNS
>       those are only dumb proxies to protect against DDOS

I'm wondering if doing the same with DNS traffic would be
possible or advisable as a way to protect the name servers.
On the other hand if the proxies get DOSsed off the Internet,
I'm not sure how much they would be helping at that point...

Jeff C.