Products & Services
/
DNS Protection

DNS Protection (DP)

Ensures 100% uptime and efficient resolution for secure domains.
Free Virtual Demo
Overview
Features
Resources

Always-On DNS Protection — Ensuring Fast, Reliable Domain Resolution

Nexusguard DNS Protection delivers always-on domain resolution through our globally distributed, high-capacity scalable DNS infrastructure. The fully redundant platform is engineered to absorb even the largest DNS-based DDoS attacks while maintaining uninterrupted service for legitimate users — ensuring 100% DNS uptime for critical websites and applications. Unlike usage-based models, our flat-fee pricing guarantees cost predictability even during sustained attacks, providing both operational resilience and financial transparency.

How it works

Our solution harnesses the power of Nexusguard's globally distributed network of scrubbing centers to swiftly and reliably resolve incoming DNS queries. By leveraging this robust infrastructure, we ensure that your online presence remains secure and operational, even in the face of malicious threats.Nexusguard offers two flexible deployment models designed to meet diverse infrastructure requirements — whether protecting specific domains or entire nameserver environments.

Hosting Model

Clients designate Nexusguard DNS as their secondary nameserver, transferring zone files via AXFR for robust protection. Authorized mapping is established through the DNS registry, concealing the client’s authoritative nameserver IP. Nexusguard’s cloud then manages legitimate DNS queries, filtering malicious traffic — ensuring full protection of DNS zones.

Reverse Proxy Model

Nexusguard DNS acts as the authoritative nameserver, working in conjunction with or replacing existing servers. It functions as a recursive server with cached data in the client's zone. If specific information is lacking, it queries upstream servers and caches responses. This model takes into consideration various attack vectors, offering continuous DDoS protection and an additional layer for TCP/UDP DNS traffic through Nexusguard's DP proxy service, maintaining name server protection.

Critical Features for Securing DNS Infrastructure

Always-On Protection

Cloud-hosted DNS domains for load sharing, ensuring continuous service amidst DDoS threats

Compliance with DNSSEC Mandates

Supports DNSSEC for data integrity and cryptographic DNS data authentication.

Supports AXFR

Functions as Primary/Secondary Name Server, facilitating AXFR for seamless data transfer.

Flat-Fee Structure

Transparent flat-fee pricing model shields businesses from unexpected cost spikes, even during periods of heightened DNS query activity

Uptime Assurance

Guaranteed 100% Availability SLA, ensuring uninterrupted service delivery and reliability.

Business-Driven Benefits for Reliable DNS Performance

Always-On Protection

Nexusguard's vast DNS server capacity ensures continuous protection against attacks
Nexusguard's vast DNS server capacity ensures continuous protection against attacks

Effortless Deployment

Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal
Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal

Guaranteed  24/7 Availability

Ensures continuous connectivity to websites and applications for users
Ensures continuous connectivity to websites and applications for users

Robust DNS DDoS Protection

Defends against DNS DDoS attacks with military-grade protection
Defends against DNS DDoS attacks with military-grade protection

Cost Predictability

Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes
Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes

Enhanced Data Integrity

Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
With Nexusguard's Bastions, I not only get faster onboarding but the freedom to be truly creative-building flexible packages that adapt to an ever-changing market. I can rely on Nexusguard's platform and team to deliver flawlessly every time, allowing us to meet customer needs with confidence.
William Manzione,
Product Manager, RETN
We want to make the network environment for our customer as safe as they feel at home. Nexusguard offers a customized internet security solution so that our customers can continue to interact with us the way supposed to be and the way they want to—all the way without interruption.
Visrut Manunpon
Chief Technical Officer, SNOC
We chose to partner with Nexusguard because of its specialty in DDoS mitigation. In fact, they not only focus on DDoS attacks, they are also curious about and strive to address the pain points they face.
Lee Shih Yen
VP, Cyber Security, StarHub
Our customers are extremely satisfied with Nexusguard DDoS Protection solutions because they have sophisticated tools that give them visibility into their networks. With Netpluz mitigation facility commissioned in Singapore, powered by Nexusguard, our customers can expect proactive and intelligent mitigations to ensure only clean traffic reaches their network.
Lau Leng Fong
CEO, Netpluz
The Nexusguard solution secures our network with enterprise-grade SLAs. Most importantly, it ensures all business-essential applications have the uptime that they require.
Michael Ng
Sales Director of REDtone
When we have queries and new service requests, the Nexusguard team were able to attend to us promptly. This is a good partnership that every business would want to ensure our business plans are implemented smoothly.
Saymon Araujo
Senior Network Analyst, Azion Technologies Inc.

FAQs

Why do I need DDoS protection on DNS service?

DDoS attacks on DNS can overwhelm servers, causing service disruptions. Our protection mitigates these attacks, ensuring service availability.

DNS is hosted in a CSP, what should I do?

If your DNS is in a CSP, consider integrating our protection via API or DNS forwarding to shield against DDoS attacks effectively.

What options are available for customers?

Customers can choose from a range of protection levels including rate limiting, anomaly detection, and advanced filtering tailored to their network requirements.

How does your service differentiate from competitors?

Our service excels in massive DNS server capacity, fine-tuned anomaly detection algorithms, and customizable protection policies, setting us apart in the industry.

How do you charge for your DDoS protection service?

Pricing is based on factors like traffic volume, protection level, and additional features. Our flexible pricing model ensures cost-effectiveness for varying network demands.

If I am a CSP or SI, do you provide a franchise option for offering DDoS protection services?

Yes, we offer a franchise option for CSPs and SIs to provide DDoS protection services to their customers. Reach out to learn more about partnership opportunities.

Features

Open All

High-Performance DNS Resolution

Distributed Name Servers

Deployable in ANYCAST mode, Nexusguard DNS Protection distributes traffic across globally distributed Points of Presence (PoPs). This architecture enhances speed, redundancy, and uptime, delivering optimal DNS performance even under heavy query loads.

Resilient Cloud Infrastructure

Nexusguard Cloud

Built around Nexusguard’s resilient cloud bandwidth, the DNS infrastructure effortlessly handles surges in traffic volume while maintaining low-latency responses — ensuring reliability during peak demand.

DANE Integration

DNS-Based Authentication of Named Entities

Nexusguard's DNS Protection service incorporates DANE (DNS-Based Authentication of Named Entities) to strengthen trust in encrypted communications. By binding SSL/TLS certificates to DNS records, the solution enforces rigorous cryptographic validation, eliminating reliance on third-party certificate authorities. This direct DNS-based authentication reduces the exposure to risks such as certificate impersonation, man-in-the-middle attacks, and various other certificate-related vulnerabilities. 

Compliance with DNSSEC

Domain Name System Security Extensions

Within DNS Protection hosting, Nexusguard reinforces security through DNSSEC, bolstering DNS integrity by verifying the legitimacy of domain data sources. DNSSEC eliminates the risk of DNS data tampering through the use of public key cryptography and digital signatures.

Customer Portal

Service Dashboard

Designed to provide complete visibility and control, the Customer Portal is a powerful, user-friendly platform for managing security and performance. Featuring an integrated dashboard and detailed analytics, it enables customers to view and configure detection and mitigation settings tailored to their specific service plans. From monitoring real-time traffic — including raw and clean bandwidth — to tracking network performance metrics like cached bandwidth and request volumes, the portal offers a comprehensive overview of their digital environment.

Customers can stay ahead of threats by viewing ongoing and stopped DDoS attacks, analyzing potential risks, and exploring detailed insights such as visitor geography, source IPs, connection speeds, and more. The portal also provides access to detailed event logs, downloadable raw logs, and monthly reports for deeper analysis.

Resources

Datasheet

Nexusguard DNS Protection Datasheet

Download PDF

Whitepaper

View All

Enhancing DNS Security with Nexusguard DNS Protection Service

The increasing prevalence and sophistication of Distributed Denial of Service (DDoS) attacks have fundamentally changed the cybersecurity landscape. DNS servers, being a critical part of internet infrastructure, are now prime targets for malicious actors. Organizations must take a proactive approach to protecting their DNS infrastructure to ensure uninterrupted operations, safeguard sensitive data, and maintain customer trust.

Read Now

Delivering Higher Value, Lower Cost DNS Protection for the Education Space

We delve into the comprehensive features and capabilities offered by Nexusguard's Origin Protection service, tailored to meet the requirements of large-scale environments managing extensive networks.

Read Now

Blog

View All
Artificial Intelligence,DDoS Attacks,DDoS Protection,DDoS detection,Machine learning
8 min read

Smart Mode: DDoS Attack Detection using Machine Learning

Nexusguard’s Smart Mode detection uses Machine Learning techniques to predict whether network traffic coming from a source is legitimate or part of a malicious DDoS attack.
Nexusguard
August 27, 2020
Amplification Attack,DNS Amplification,DNS Attack,Domain Hijack
8 min read

What Is A DNS Attack And Why Are They Dangerous?

It is orchestrated by an attacker exploiting the vulnerabilities in a DNS. But what exactly is a DNS you might ask?Contact Nexusguard now.
Nexusguard
September 8, 2019

Looking for Simpler DDoS Protection?

Protect your critical infrastructure effortlessly with Nexusguard’s reliable and easy-to-manage DDoS protection. Speak with one of our network security experts to learn how we can simplify your security operations and give you peace of mind.
Talk To Our Network Security Expert
Free Virtual Demo