BoronGun 0.9 preview: scriptable attack profiles

BoronGun exists so you find your DNS server's breaking point before an attacker does. 0.9 makes the load profiles themselves a lot more expressive.

What's landing

• Weighted query mixes — define what fraction of traffic is A, AAAA, ANY, or garbage qtypes, instead of a flat round-robin.
• Scriptable profiles — a small Lua surface for generating query names and timing dynamically, instead of replaying a static wordlist.
• Per-worker pacing — smooth a target QPS across workers instead of bursting, useful for testing RRL tuning rather than just raw capacity.

Example profile

profile.qtypes = { A = 0.6, AAAA = 0.25, ANY = 0.05, NXDOMAIN = 0.10 }
profile.qname = function(i)
  return "load-" .. (i % 50000) .. ".bench.test."
end

Availability

0.9 is in internal testing now. See BoronGun for the current stable docs, and watch this feed for the release announcement.