DNS, DHCP & IP Address Management appliances
For Microsoft DNS & DHCP servers
For open source DNS & DHCP servers
Cloud-based visualization of analytics across DDI architecture
Manage multi-vendor cloud DNS servers centrally
RIR Declaration Management and Automation
Automated network device configuration and management
Centralized visibility over all your clouds
A single source of truth for your network automation
Why DDI is an Obvious Starting Point
DNS Threat Intelligence for proactive defense
Intelligence Insights for Threat Detection and Investigation
Adaptive DNS security for service continuity and data protection
Improve Application Access Control to prevent spread of attacks
Protect users and block DNS-based malware activity
Carrier-grade DNS DDoS attack protection
Optimize application delivery performance from the edge
for Proactive Network Security
Visibility, analytics and micro segmentation for effective Zero Trust strategy
Enable work from anywhere by controlling access, security and data privacy
Simplify management and control costs across AWS, Azure and GCP environments
Risk-free migration to reduce DDI complexity and cost
Move risk-free to improve performance, security and costs
Automate management, unify control and strengthen security of connected devices
Protect your network against all DNS attacks, data exfiltration and ransomware
Enable zero touch operations for network management and security
Improve resiliency, deployment velocity and user experience for SD-WAN projects
Integrated DNS, DHCP, IPAM services to simplify, automate and secure your network.
Simplify design, deployment and management of critical DDI services for telcos
Optimize administration and security of critical DDI services for healthcare
Simplify and automate management of critical DDI services for finance
Simplify and automate management of critical DDI services for higher education
Simplify and automate management of critical DDI services for retail
Simplify Management and Automation for Network Operations Teams
Elevate SecOps Efficiency by Simplifying Threat Response
Open architecture for DDI integration
Technology partnerships for network security & management ecosystems
Extend security perimeters and strengthen network defenses
Submit requests for temporary licenses
Submit access requests for EfficientIP knowledge platforms
Submit membership requests for EfficientIP Community
Strengthen Your Network Protection with Smart DNS Security
Customer-centric DDI project delivery and training
Acquire the skills needed to manage EfficientIP SOLIDserverโข
Identify vulnerabilities with an assessment of your DNS traffic
Test your protection against data breaches via DNS
Dedicated representation for your organization inside EfficientIP
Explore content which helps manage and automate your network and cloud operations
Read content which strengthens protection of your network, apps, users and data
Learn how to enhance your app delivery performance to improve resilience and UX
Why Using DNS Allow Lists is a No-Brainer
This enterprise-grade cloud platform allows you to improve visibility, enhance operational efficiency, and optimize network performance effortlessly.
Who we are and what we do
Meet the team of leaders guiding our global growth
Technology partnerships for network security and management ecosystems
Discover the benefits of the SmartPartner global channel program
Become a part of the innovation
The latest updates, release information, and global events
November 23, 2016 | Written by: Efficient IP | DDI, DNS Security
DDIDDI ManagementDDI ServicesDDI SolutionsDNSDNS SecurityDNS SolutionIoT
DNS security has been in the news again, with one of the largest DDoS attacks ever disrupting the Dyn cloud DNS service. At least 150,000 compromised devices (including IoT hardware) were used by the Mirai botnet to bombard cloud-hosted DNS servers with DNS requests, taking down access to many of the Internetโs most popular services. Itโs not the only major service provider thatโs had a DNS-based attack in the last few weeks, with Singaporeโs StarHub reporting a similar incident.
What is important to note is that it wasnโt just cloud DNS services that were affected; the millions of users trying to access DNS addresses served by the service were also generating a massive number of retries, increasing normal service volume by 10 to 20 times. So, while the attackers were flooding their servers with a massive number of TCP and UDP packets targeted at port 53, its users were also having their normal load on the service magnified as they tried to get around the disruption.
Outsourcing DNS has been seen as good practice – it removes infrastructure that you may not have the resources to run. But these incidents show there is a downside: youโre increasing the risk of becoming collateral damage in a DDoS on someone elseโs services. Sharing DNS resources with thousands of other users means an attack on one is an attack on all.
Whatโs clear from these recent incidents is that hackers see DNS as a weak link in the Internet security chain, one that can be quickly overwhelmed and used to take down not just the target site, but also to deliver a massive amount of collateral damage. While you may not be the target of such an attack, thereโs a much higher probability that your users wonโt be able to get to your sites and services.
Itโs a definite problem, but there is an answer: building a hybrid DNS architecture.
One key part of the DNS specification is that it lets you use multiple servers to host DNS records, servers that can all be accessed at the same time. While it may be a little more work keeping in sync, having multiple DNS servers gives you the option of having a service that continues running for your users in the event of one of your DNS servers being inaccessible. Some DNS servers will handle the process of updating other DNS servers automatically, reducing the time needed to manage your DNS assets.
In a hybrid DNS architecture, your DNS servers are active all the time, so in the event of a major DNS DDoS, your users will continue using the unaffected server โ giving them continued access to your servers, while at the same time preventing automatic retries multiplying the effects of the initial attack.
By using your own server as part of a hybrid DNS for your sites and services, youโre able to reduce the risk of becoming collateral damage, unlike many big Internet services, which were inaccessible for several hours while the effects of DNS DDoS dissipated. Using an alternate cloud DNS in conjunction with a local DNS-based service, will also allow you to stay online when your cloud provider is attacked, and by having a cloud DNS as an alternative to your own local service, youโre covered if your local server is overwhelmed by a direct attack.
These major DDoS on cloud service providers show just how important DNS is to the wider Internet. By building a hybrid DNS mixing DNS technologies, and using a mix of cloud and local DNS providers, you and your servers will reduce the risk of becoming collateral damage in the next big bot-powered disruption. If your business depends on connectivity, itโs well worth investing in a solution that gives you the best of both worlds, while reducing your exposure to risk.
When our goal is to help companies face the challenges of modern infrastructures and digital transformation, actions speak louder than words.
Explore content highlighting the value EfficientIP solutions bring to your network
We use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
We use cookies to enhance your browsing experience, serve personalized content, and analyze our traffic. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site.