CNNIC CNNIC CNNIC CNNIC A recursive DNS server generally uses random port numbers to send outbound requests to protect against DNS spoofing attacks. Due to the limitation of operation system, a process typically can only open numerable file descriptors simultaneously. This limit reduces recursion performance of resolvers. This draft offers an approach to improve both recursion performance and security for recursive servers.