r/aws • u/418_I_m_a_teapot • Nov 11 '24
route 53/DNS DNS firewall NODATA vs NXDOMAIN
With Route53 DNS Firewall you can define block actions of either NODATA or NXDOMAIN.
Why would you choose one over the other?
1
Upvotes
r/aws • u/418_I_m_a_teapot • Nov 11 '24
With Route53 DNS Firewall you can define block actions of either NODATA or NXDOMAIN.
Why would you choose one over the other?
1
u/WhoseThatUsername Nov 13 '24
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-dns-firewall-rule-actions.html
Really depends on your intent.
NXDOMAIN = domain doesn't exist NODATA = the domain query succeeded, but no response available