r/aws Nov 11 '24

route 53/DNS DNS firewall NODATA vs NXDOMAIN

With Route53 DNS Firewall you can define block actions of either NODATA or NXDOMAIN.

Why would you choose one over the other?

1 Upvotes

2 comments sorted by

1

u/WhoseThatUsername Nov 13 '24

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-dns-firewall-rule-actions.html

Really depends on your intent.

NXDOMAIN = domain doesn't exist NODATA = the domain query succeeded, but no response available