Products & Services
/
DNS Protection

DNS Protection (DP)

Ensures 100% uptime and efficient resolution for secure domains.
Free Virtual Demo
Overview
Features
Resources

Always-On DNS Protection — Ensuring Fast, Reliable Domain Resolution

Nexusguard DNS Protection delivers always-on domain resolution through our globally distributed, high-capacity scalable DNS infrastructure. The fully redundant platform is engineered to absorb even the largest DNS-based DDoS attacks while maintaining uninterrupted service for legitimate users — ensuring 100% DNS uptime for critical websites and applications. Unlike usage-based models, our flat-fee pricing guarantees cost predictability even during sustained attacks, providing both operational resilience and financial transparency.

How it works

Our solution harnesses the power of Nexusguard's globally distributed network of scrubbing centers to swiftly and reliably resolve incoming DNS queries. By leveraging this robust infrastructure, we ensure that your online presence remains secure and operational, even in the face of malicious threats.Nexusguard offers two flexible deployment models designed to meet diverse infrastructure requirements — whether protecting specific domains or entire nameserver environments.

Hosting Model

Embedded image
Clients designate Nexusguard DNS as their secondary nameserver, transferring zone files via AXFR for robust protection. Authorized mapping is established through the DNS registry, concealing the client’s authoritative nameserver IP. Nexusguard’s cloud then manages legitimate DNS queries, filtering malicious traffic — ensuring full protection of DNS zones.

Reverse Proxy Model

Nexusguard DNS acts as the authoritative nameserver, working in conjunction with or replacing existing servers. It functions as a recursive server with cached data in the client's zone. If specific information is lacking, it queries upstream servers and caches responses. This model takes into consideration various attack vectors, offering continuous DDoS protection and an additional layer for TCP/UDP DNS traffic through Nexusguard's DP proxy service, maintaining name server protection.

Critical Features for Securing DNS Infrastructure

Always-On Protection

Cloud-hosted DNS domains for load sharing, ensuring continuous service amidst DDoS threats

Compliance with DNSSEC Mandates

Supports DNSSEC for data integrity and cryptographic DNS data authentication.

Supports AXFR

Functions as Primary/Secondary Name Server, facilitating AXFR for seamless data transfer.

Flat-Fee Structure

Transparent flat-fee pricing model shields businesses from unexpected cost spikes, even during periods of heightened DNS query activity

Uptime Assurance

Guaranteed 100% Availability SLA, ensuring uninterrupted service delivery and reliability.

Business-Driven Benefits for Reliable DNS Performance

Always-On Protection

Nexusguard's vast DNS server capacity ensures continuous protection against attacks
Nexusguard's vast DNS server capacity ensures continuous protection against attacks

Effortless Deployment

Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal
Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal

Guaranteed  24/7 Availability

Ensures continuous connectivity to websites and applications for users
Ensures continuous connectivity to websites and applications for users

Robust DNS DDoS Protection

Defends against DNS DDoS attacks with military-grade protection
Defends against DNS DDoS attacks with military-grade protection

Cost Predictability

Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes
Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes

Enhanced Data Integrity

Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
With Nexusguard's Bastions, I not only get faster onboarding but the freedom to be truly creative-building flexible packages that adapt to an ever-changing market. I can rely on Nexusguard's platform and team to deliver flawlessly every time, allowing us to meet customer needs with confidence.
William Manzione,
Product Manager, RETN
We want to make the network environment for our customer as safe as they feel at home. Nexusguard offers a customized internet security solution so that our customers can continue to interact with us the way supposed to be and the way they want to—all the way without interruption.
Visrut Manunpon
Chief Technical Officer, SNOC
We chose to partner with Nexusguard because of its specialty in DDoS mitigation. In fact, they not only focus on DDoS attacks, they are also curious about and strive to address the pain points they face.
Lee Shih Yen
VP, Cyber Security, StarHub
Our customers are extremely satisfied with Nexusguard DDoS Protection solutions because they have sophisticated tools that give them visibility into their networks. With Netpluz mitigation facility commissioned in Singapore, powered by Nexusguard, our customers can expect proactive and intelligent mitigations to ensure only clean traffic reaches their network.
Lau Leng Fong
CEO, Netpluz
The Nexusguard solution secures our network with enterprise-grade SLAs. Most importantly, it ensures all business-essential applications have the uptime that they require.
Michael Ng
Sales Director of REDtone
When we have queries and new service requests, the Nexusguard team were able to attend to us promptly. This is a good partnership that every business would want to ensure our business plans are implemented smoothly.
Saymon Araujo
Senior Network Analyst, Azion Technologies Inc.

FAQs

Why do I need DDoS protection on DNS service?
DDoS attacks on DNS can overwhelm servers, causing service disruptions. Our protection mitigates these attacks, ensuring service availability.
DNS is hosted in a CSP, what should I do?
If your DNS is in a CSP, consider integrating our protection via API or DNS forwarding to shield against DDoS attacks effectively.
What options are available for customers?
Customers can choose from a range of protection levels including rate limiting, anomaly detection, and advanced filtering tailored to their network requirements.
How does your service differentiate from competitors?

Our service excels in massive DNS server capacity, fine-tuned anomaly detection algorithms, and customizable protection policies, setting us apart in the industry.

How do you charge for your DDoS protection service?
Pricing is based on factors like traffic volume, protection level, and additional features. Our flexible pricing model ensures cost-effectiveness for varying network demands.
If I am a CSP or SI, do you provide a franchise option for offering DDoS protection services?
Yes, we offer a franchise option for CSPs and SIs to provide DDoS protection services to their customers. Reach out to learn more about partnership opportunities.

Features

Open All
High-Performance DNS ResolutionResilient Cloud InfrastructureDANE IntegrationCompliance with DNSSECCustomer Portal
Select Features

High-Performance DNS Resolution

Open All
Close All
Distributed Name Servers

Deployable in ANYCAST mode, Nexusguard DNS Protection distributes traffic across globally distributed Points of Presence (PoPs). This architecture enhances speed, redundancy, and uptime, delivering optimal DNS performance even under heavy query loads.

Resilient Cloud Infrastructure

Open All
Close All
Nexusguard Cloud

Built around Nexusguard’s resilient cloud bandwidth, the DNS infrastructure effortlessly handles surges in traffic volume while maintaining low-latency responses — ensuring reliability during peak demand.

DANE Integration

Open All
Close All
DNS-Based Authentication of Named Entities

Nexusguard's DNS Protection service incorporates DANE (DNS-Based Authentication of Named Entities) to strengthen trust in encrypted communications. By binding SSL/TLS certificates to DNS records, the solution enforces rigorous cryptographic validation, eliminating reliance on third-party certificate authorities. This direct DNS-based authentication reduces the exposure to risks such as certificate impersonation, man-in-the-middle attacks, and various other certificate-related vulnerabilities. 

Compliance with DNSSEC

Open All
Close All
Domain Name System Security Extensions

Within DNS Protection hosting, Nexusguard reinforces security through DNSSEC, bolstering DNS integrity by verifying the legitimacy of domain data sources. DNSSEC eliminates the risk of DNS data tampering through the use of public key cryptography and digital signatures.

Customer Portal

Open All
Close All
Service Dashboard

Designed to provide complete visibility and control, the Customer Portal is a powerful, user-friendly platform for managing security and performance. Featuring an integrated dashboard and detailed analytics, it enables customers to view and configure detection and mitigation settings tailored to their specific service plans. From monitoring real-time traffic — including raw and clean bandwidth — to tracking network performance metrics like cached bandwidth and request volumes, the portal offers a comprehensive overview of their digital environment.

Customers can stay ahead of threats by viewing ongoing and stopped DDoS attacks, analyzing potential risks, and exploring detailed insights such as visitor geography, source IPs, connection speeds, and more. The portal also provides access to detailed event logs, downloadable raw logs, and monthly reports for deeper analysis.

Resources

Datasheet

Nexusguard Origin Protection Datasheet

Download PDF
Download File

Nexusguard Origin Protection Datasheet

Download PDF

Whitepaper

How Can Governments & Public Institutions Defend Against DDoS Attacks

Protect government and public services from crippling DDoS attacks with this whitepaper on threat impact and 360° mitigation for always‑on citizen services.

Read Now

VoIP Protection Solution

Protect government and public services from crippling DDoS attacks with this whitepaper on threat impact and 360° mitigation for always‑on citizen services.

Read Now

Solution Guide: Financial Services Industry & DDoS Attacks

This paper looks at how the Financial Services Industry is adversely impacted by DDoS Attacks. We present a business impact analysis and various solutions to the problems faced by the industry. The paper highlights Nexusguard’s protection suites for Applications and DNS.

Read Now

Surviving GDPR Means Success in New Internet Era

To survive the GDPR data rules, businesses must prepare themselves with technology that can defend them against data breach, intrusion and service disruption.

Read Now

DNSSEC: The Global Chain of Trust

This paper briefly explains what DNSSEC is, how it works, what its benefits are, how Nexusguard deploys DNSSEC and key management best practices.

Read Now

Blog

Empowering Resilient Networks with Nexusguard’s TCP Connection Flood Protection

Nexusguard’s TCP Connection Flood Filter is an invaluable tool in safeguarding server resources, maintaining service availability, and protecting the interests of legitimate users.
Nexusguard
February 11, 2025

DDoS Protection for Small Wireless ISPs with Limited Router Capabilities

By utilizing Fastnetmon for local flow monitoring and Nexusguard’s Origin Protection Service for off-ramp DDoS mitigation, WISPs can safeguard their networks from DDoS attacks cost-effectively.
Nexusguard
December 24, 2024

Safeguard your internet uplink and network infrastructure with Nexusguard Origin Protection

Nexusguard
June 12, 2024

Simplifying Cloud Diversion Route Policies for Better Efficiency and Risk Management with Nexusguard On-Net

Enhance the resilience and reliability of your network against volumetric DDoS attacks with Nexusguard On-Net, a comprehensive solution that employs a multifaceted approach, leveraging segregated Internet uplinks, automated route announcements, and rapid traffic diversion to safeguard your critical infrastructure.
Nexusguard
May 31, 2024

Enhancing Nexusguard Cloud Diversion with RPKI ROA

For route verification to be effective, Nexusguard validates ROAs created by their customers, ensuring all their routes are safe to announce to the Internet.
Nexusguard
March 14, 2022

Safeguarding Customer Assets with Nexusguard On-Net

Nexusguard’s enhanced Cloud Diversion method, On-Net, not only reduces network latency but also expedites time-to-mitigation, ensuring customer assets are protected at all times.
Nexusguard
February 27, 2022

Looking for Simpler DDoS Protection?

Protect your critical infrastructure effortlessly with Nexusguard’s reliable and easy-to-manage DDoS protection. Speak with one of our network security experts to learn how we can simplify your security operations and give you peace of mind.
Talk To Our Network Security Expert
Free Virtual Demo