Defend against DDoS and Pharming attacks by deploying a fully trusted environment for DNS resolution
Learn how a leading ISP deployed UltraDNS Shield to enhance security against Internet disruptions and DNS reliability
Introduction
A ~$1.2 billion ISP provides internet access and related service to individual and business customers in United States. The Group's activities are divided into four operating segments: Narrowband access, broadband or high speed access, web hosting and content and commerce and advertising. The Narrowband access segment provides dial up Internet access. The broadband access segment provides high-speed, high-capacity access services including DSL, cable, satellite, fixed wireless and dedicated circuit services. The web hosting segment leases server space and provides web hosting services to companies and individuals. The content, commerce and advertising segment provides and sells banners, content space and other online ads. The company provides this service to approximately five million paying customers through its network.
Enterprise Challenges
In a low margin, highly competitive internet access business, the company’s top priority was to improve customer loyalty by offering cost-effective, reliable, high speed access and pro-active support to its subscribers. Having a robust DNS infrastructure was key and the company was looking for a solution that boosted DNS security and guaranteed 100% uptime for millions of their subscribers. Key requirements for DNS included high availability, redundancy, geographic diversity, and resilience to attacks.
The UltraDNS Solution
Outsourcing their DNS infrastructure management to UltraDNS proved to be an easy decision. The customer became a partner of DNS Shield that gave it the leverage of the UltraDNS robust DNS infrastructure and high level of security.
By utilizing the UltraDNS global DNS network, the customer was able to automatically have its DNS information in all 14 nodes across five continents to support both physical and geographic diversity. Each node consists of multiple DNS servers
By deploying the DNS Shield, the ISP Partner’s recursive DNS infrastructure connects directly to the UltraDNS network, creating a fully trusted and protected environment for DNS resolution. This ‘out of band’ command and control combination provides the most advanced protection available against Distributed Denial of Service (DDoS) and pharming attacks. The UltraDNS nodes deployed within each partner network are functionally identical to those of the public UltraDNS network currently distributed across five continents. ISP’s customers benefit from enhanced security against Internet disruptions as all DNS queries from DNS Shield Partner ISP customers are resolved locally within the ISP’s infrastructure. In the event of network catastrophe on the public Internet or other network failure, DNS Shield partner customers’ queries are isolated from the effects and continue to be resolved locally ensuring domains powered by UltraDNS are 100% accessible.
Benefits
The customer was able to exceed its customer satisfaction levels through superior response times from recursive servers responding 10 times faster and reduced CAPEX in recursive server capacity. UltraDNS solutions offered enhanced security, reducing the likelihood of major disruption due to DDoS and provide 100% DNS reliability.
|
