[knot-dns-users] Re: tcp ddos

On 15 Jun 2024, at 8:09 AM, Rob Austein <sra(a)hactrn.net> wrote: Ok, that (finally!) makes sense, including explaining why forcing a retransfer from the secondary's side with `rndc retransfer` fixes the problem, since retransfer almost certainly does AXFR. Thanks Anand! Remains the question of whether the cause was Knot generating a bad IXFR or BIND9 failing to purge data from a partial IXFR. --