response rate limiting - knot-dns-users

28 Jan 2020

Hi all,
I migrated from bind to knot. Everything works fine, except rrl.
I "translated" the bind config

rate-limit {
                 responses-per-second 5;
                 window 5;
};

to

mod-rrl:
   - id: default
     rate-limit: 5
     slip: 2           # Every other response slips

template:
   - id: default
     storage: "/etc/knot/zones"
     timer-db: "/var/lib/knot/timers"
     semantic-checks: on
     global-module: mod-rrl/default

But the limiting doesn't work. I testet with

for i in {1..20}; \
  do dig @ns +short +tries=1 +time=1 mydomain.de a; \
done

And got 20 answers quickly.
Any ideas what's wrong here?
(I'm unsing ver 2.7.6 @Debian 10)

Best regards,
Thomas.