Anti-Flood & Abuse Control Setup in WhiteDNS Server (v0.12.0)
A comprehensive guide to configuring anti-flood policies, request rate limits, burst thresholds, upload caps, DNS query quotas, and resolving 70K request rate warnings in WhiteDNS Server.
Why Rate Limiting is Critical for DNS Tunneling Servers
DNS tunneling servers handle thousands of rapid UDP query packets. Without proper anti-flood policies, aggressive torrent clients, background syncs, or automated bots can trigger cloud hosting provider abuse warnings (such as the common Hetzner/OVH 70,000 queries/sec threshold).
Key Configuration Parameters
- Max Query Rate (QPS): Maximum allowed DNS requests per second per IP (Recommended:
150 - 250 QPS). - Burst Limit: Short-term query spikes permitted before temporary throttling (Recommended:
300). - Connection Quota: Monthly or daily data caps per user account.
- DNS Flood Shield: Drops malformed non-tunnel DNS lookups to save CPU cycles.
Step-by-Step Activation
- In WhiteDNS Panel, go to Security & Firewall → Anti-Flood Policies.
- Enable Automated IP Jailing for clients exceeding burst limits for more than 30 consecutive seconds.
- Exclude local DNS resolvers from rate-limiting rules.
- Save changes and restart the Soar service daemon.