DNS Protection (DP) protects mission-critical services from DNS attacks, leveraging Nexusguard’s globally distributed DNS infrastructure to mitigate DNS-based DDoS attacks while responding to legitimate user requests
Hosting Model
Reverse Proxy Model
Ensure mission critical services are 100% up and running and free from DDoS attacks by deploying DNS on Nexusguard’s geographically Anycast network.
1. White/blacklisting
2. Malformed packet
3. Rate-limiting
4. Payload filtering
To identify and drop malicious queries.
1. DNS Hosting
2. Reverse Proxy
Choose DNS hosting or reverse proxy as deployment depending on whether you have to protect certain domains or their name servers.
View advanced stats visualizing DNS queries to selected domains, including legitimate and unresolvable queries.
- Access to global Anycast infrastructure and scalability
- Custom rules matching your organizational security policy
- Minimize downtime and reduce costly impacts of attacks
- Compliance with DNSSEC mandates
- Comprehensive real-time dashboard and analytics
- Automatic monthly reports
- Unlimited raw log downloads
- Comprehensive real-time dashboard and analytics- Automatic monthly reports- Real-time packet-captures- Unlimited raw log downloads
- Attack monitoring and mitigation with 24x7 SOC & support team
- Dedicated technical support
DNS Protection that delivers 100% availability and enables DNS requests to be resolved efficiently for protected domains. Our platform leverages on Nexusguard’s highly scalable, fully redundant and globally distributed DNS platform with sufficient capacity to absorb large DNS-based DDoS attacks while responding to legitimate user requests.
Download nowNexusguard DNS Protection service protects mission-critical online services from all DNS attacks and malicious queries. The solution leverages Nexusguard’s globally distributed network of scrubbing centers to resolve incoming DNS queries quickly and reliably.
Download nowOften described as the Internet phonebook, DNS is fundamentally important to the Internet. DNS also inherits various design, implementation and configuration vulnerabilities.This paper explains what DNSSEC is, how it works, what its benefits are, how Nexusguard deploys DNSSEC and key management best practices.
Learn MoreThis White Paper provides an overview of the common types of DDoS attacks, negative impact of DDoS attacks on business and operations as well as basic mitigation techniques. The document further presents Nexusguard’s integrated solution in countering DDoS attacks and other cyber threats, including our multi-layered mitigation technology, SSL attack mitigation methods, Web Application Firewall (WAF), content and networking optimization, as well as the Customer Portal.
Learn MoreThe advances in artificial intelligence (AI) in recent years has given rise to the application of Machine Learning models to enhance DDoS attack detection. Nexusguard’s Smart Mode detection uses Machine Learning techniques to predict whether network traffic coming from a source is legitimate or part of a malicious DDoS attack.
Learn MoreThough not strictly an attack against a DNS system, an amplification attack instead exploits DNS services to bolster DDoS attacks.
Learn More