How can rate limiting be used to mitigate DNS amplification attacks?

Rate limiting restricts the number of DNS queries a server will process from a single source IP address within a given timeframe. This prevents attackers from flooding the server with spoofed requests. Effective rate limiting requires careful configuration to avoid blocking legitimate users. It's often implemented at the DNS server level or upstream by ISPs. Different rate limits can be applied based on query type (e.g., stricter limits for ANY queries).