Comment by exiguus

dnsdist support QPS limits [1] and eBPF filtering [2]. And you can use dynamic Rules to drop traffic and there are several rules to set UDP and TCP limits.

A in production config looks like: https://github.com/freifunkMUC/ffmuc-salt-public/blob/main/d...

[1] https://www.dnsdist.org/advanced/qpslimits.html

[2] https://www.dnsdist.org/advanced/ebpf.html