Heyo!

Any others who are being affected?

It looks like our customers Netgear routers (known ones: WNR3500Lv2, WNDR4500) are asking our DNS Server for the A record of: time-g.netgear.com or time- a.netgear.com

Instead of an A record reply, they get a CNAME as answer with additional information the A record of that CNAME. That is what netgear has published on their DNS Servers.

Those routers are not happy with that reply and just start sending several hundred requests per second for A time-g.netgear.com resulting in considerable load and traffic on our DNS caches. Some customers have already transfered 35GB of DNS traffic, only since today midnight.

I have contacted netgear technical support. The issue is yet unknown to them. They got my pcap files to analyze :-)

Any others observing that behaviour of netgear products? Any know remedies?

Mit freundlichen Grüssen

Benoit Panizzon