+1 here too.
On 4/30/19 4:41 PM, kevin(a)scrye.com wrote:
> From: Kevin Fenzi <kevin(a)scrye.com>
>
> Signed-off-by: Kevin Fenzi <kevin(a)scrye.com>
> ---
> roles/dns/files/named.conf | 4 ++++
> 1 file changed, 4 insertions(+)
>
> diff --git a/roles/dns/files/named.conf b/roles/dns/files/named.conf
> index c13d65e..e210088 100644
> --- a/roles/dns/files/named.conf
> +++ b/roles/dns/files/named.conf
> @@ -574,6 +574,10 @@ view "RDU2" {
> view "NA" {
> match-clients { US; CA; MX; };
> recursion no;
> + // no rate-limit on internal requests
> + rate-limit {
> + exempt-clients { ns_redhat; };
> + };
> zone "fedoraproject.org" {
> type master;
> file
"/var/named/master/built/NA/fedoraproject.org.signed";
>