Through the business, highly scalable DNS has eventually become a cloud-based service, with tens of thousands or hundreds of customers — each with numerous domain names — bunched on sharing nameserver statements and single networks. This raises the likelihood you will sense the pain of someone else’s.
It is essential to understand the way traffic is isolated by your supplier. Neustar, for example, arranges our DNS network into sections, each with a nameserver statement shared by just a tiny group of customers (committed name servers are accessible also). This DDoS protection-centric strategy enables us to transfer individual name server statements from the DNS network to the DDoS decrease network without interrupting resolution. We can supply prevent any security impact for customers on the DNS network AND powerful, prompt decrease to those under attack.
Ensuring you are on a segmented nameserver statement — and they come with different designs — is the one most powerful strategy to safeguard your DNS traffic. You will have to work with your supplier to transfer all those domain names. It is worth it. The evidence? During the strike that strike on the network of Neustar, the majority of our customers that were segmented felt little or no impact.