Productos y servicios
/
DNS Protection

DNS Protection (DP)

Ensures 100% uptime and efficient resolution for secure domains.
Free Virtual Demo
Overview
Features
Resources

Always-On DNS Protection — Ensuring Fast, Reliable Domain Resolution

Nexusguard DNS Protection delivers always-on domain resolution through our globally distributed, high-capacity scalable DNS infrastructure. The fully redundant platform is engineered to absorb even the largest DNS-based DDoS attacks while maintaining uninterrupted service for legitimate users — ensuring 100% DNS uptime for critical websites and applications. Unlike usage-based models, our flat-fee pricing guarantees cost predictability even during sustained attacks, providing both operational resilience and financial transparency.

How it works

Our solution harnesses the power of Nexusguard's globally distributed network of scrubbing centers to swiftly and reliably resolve incoming DNS queries. By leveraging this robust infrastructure, we ensure that your online presence remains secure and operational, even in the face of malicious threats.Nexusguard offers two flexible deployment models designed to meet diverse infrastructure requirements — whether protecting specific domains or entire nameserver environments.

Hosting Model

Embedded image
Clients designate Nexusguard DNS as their secondary nameserver, transferring zone files via AXFR for robust protection. Authorized mapping is established through the DNS registry, concealing the client’s authoritative nameserver IP. Nexusguard’s cloud then manages legitimate DNS queries, filtering malicious traffic — ensuring full protection of DNS zones.

Reverse Proxy Model

Nexusguard DNS acts as the authoritative nameserver, working in conjunction with or replacing existing servers. It functions as a recursive server with cached data in the client's zone. If specific information is lacking, it queries upstream servers and caches responses. This model takes into consideration various attack vectors, offering continuous DDoS protection and an additional layer for TCP/UDP DNS traffic through Nexusguard's DP proxy service, maintaining name server protection.

Critical Features for Securing DNS Infrastructure

Always-On Protection

Cloud-hosted DNS domains for load sharing, ensuring continuous service amidst DDoS threats

Compliance with DNSSEC Mandates

Supports DNSSEC for data integrity and cryptographic DNS data authentication.

Supports AXFR

Functions as Primary/Secondary Name Server, facilitating AXFR for seamless data transfer.

Flat-Fee Structure

Transparent flat-fee pricing model shields businesses from unexpected cost spikes, even during periods of heightened DNS query activity

Uptime Assurance

Guaranteed 100% Availability SLA, ensuring uninterrupted service delivery and reliability.

Business-Driven Benefits for Reliable DNS Performance

Always-On Protection

Nexusguard's vast DNS server capacity ensures continuous protection against attacks
Nexusguard's vast DNS server capacity ensures continuous protection against attacks

Effortless Deployment

Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal
Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal

Guaranteed  24/7 Availability

Ensures continuous connectivity to websites and applications for users
Ensures continuous connectivity to websites and applications for users

Robust DNS DDoS Protection

Defends against DNS DDoS attacks with military-grade protection
Defends against DNS DDoS attacks with military-grade protection

Cost Predictability

Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes
Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes

Enhanced Data Integrity

Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
With Nexusguard's Bastions, I not only get faster onboarding but the freedom to be truly creative-building flexible packages that adapt to an ever-changing market. I can rely on Nexusguard's platform and team to deliver flawlessly every time, allowing us to meet customer needs with confidence.
William Manzione,
Product Manager, RETN
We want to make the network environment for our customer as safe as they feel at home. Nexusguard offers a customized internet security solution so that our customers can continue to interact with us the way supposed to be and the way they want to—all the way without interruption.
Visrut Manunpon
Chief Technical Officer, SNOC
We chose to partner with Nexusguard because of its specialty in DDoS mitigation. In fact, they not only focus on DDoS attacks, they are also curious about and strive to address the pain points they face.
Lee Shih Yen
VP, Cyber Security, StarHub
Our customers are extremely satisfied with Nexusguard DDoS Protection solutions because they have sophisticated tools that give them visibility into their networks. With Netpluz mitigation facility commissioned in Singapore, powered by Nexusguard, our customers can expect proactive and intelligent mitigations to ensure only clean traffic reaches their network.
Lau Leng Fong
CEO, Netpluz
The Nexusguard solution secures our network with enterprise-grade SLAs. Most importantly, it ensures all business-essential applications have the uptime that they require.
Michael Ng
Sales Director of REDtone
When we have queries and new service requests, the Nexusguard team were able to attend to us promptly. This is a good partnership that every business would want to ensure our business plans are implemented smoothly.
Saymon Araujo
Senior Network Analyst, Azion Technologies Inc.

FAQs

¿Por qué necesito protección contra DDoS en el servicio DNS?
Los ataques DDoS al DNS pueden sobrecargar los servidores y provocar interrupciones en el servicio. Nuestra protección mitiga estos ataques y garantiza la disponibilidad del servicio.
El DNS está alojado en un ISP, ¿qué debo hacer?

Si tu DNS está en un ISP, considera integrar nuestra protección mediante API o reenvío de DNS para protegerte de los ataques DDoS de forma eficaz.

¿Qué opciones están disponibles para los clientes?
Los clientes pueden elegir entre una variedad de niveles de protección que incluyen la limitación de velocidad, la detección de anomalías y el filtrado avanzado adaptado a sus requisitos de red.
¿Cómo se diferencia su servicio de los de la competencia?

Nuestro servicio se destaca por la enorme capacidad de los servidores DNS, los algoritmos de detección de anomalías perfeccionados y las políticas de protección personalizables, lo que nos diferencia en la industria.

¿Cómo se cobra por el servicio de protección contra DDoS?
Los precios se basan en factores como el volumen de tráfico, el nivel de protección y las funciones adicionales. Nuestro modelo de precios flexible garantiza la rentabilidad para las diferentes demandas de red.
Si soy un ISP o SI (System Integrator), ¿ofrecen una opción de franquicia para ofrecer servicios de protección contra DDoS?

Sí, ofrecemos una opción de franquicia para que los ISP y los SI brinden servicios de protección contra DDoS a sus clientes. Comuníquese con nosotros para obtener más información sobre las oportunidades de asociación.

Features

Open All
High-Performance DNS ResolutionResilient Cloud InfrastructureDANE IntegrationCompliance with DNSSECCustomer Portal
Select Features

High-Performance DNS Resolution

Open All
Close All
Distributed Name Servers

Deployable in ANYCAST mode, Nexusguard DNS Protection distributes traffic across globally distributed Points of Presence (PoPs). This architecture enhances speed, redundancy, and uptime, delivering optimal DNS performance even under heavy query loads.

Resilient Cloud Infrastructure

Open All
Close All
Nexusguard Cloud

Built around Nexusguard’s resilient cloud bandwidth, the DNS infrastructure effortlessly handles surges in traffic volume while maintaining low-latency responses — ensuring reliability during peak demand.

DANE Integration

Open All
Close All
DNS-Based Authentication of Named Entities

Nexusguard's DNS Protection service incorporates DANE (DNS-Based Authentication of Named Entities) to strengthen trust in encrypted communications. By binding SSL/TLS certificates to DNS records, the solution enforces rigorous cryptographic validation, eliminating reliance on third-party certificate authorities. This direct DNS-based authentication reduces the exposure to risks such as certificate impersonation, man-in-the-middle attacks, and various other certificate-related vulnerabilities. 

Compliance with DNSSEC

Open All
Close All
Domain Name System Security Extensions

Within DNS Protection hosting, Nexusguard reinforces security through DNSSEC, bolstering DNS integrity by verifying the legitimacy of domain data sources. DNSSEC eliminates the risk of DNS data tampering through the use of public key cryptography and digital signatures.

Customer Portal

Open All
Close All
Service Dashboard

Designed to provide complete visibility and control, the Customer Portal is a powerful, user-friendly platform for managing security and performance. Featuring an integrated dashboard and detailed analytics, it enables customers to view and configure detection and mitigation settings tailored to their specific service plans. From monitoring real-time traffic — including raw and clean bandwidth — to tracking network performance metrics like cached bandwidth and request volumes, the portal offers a comprehensive overview of their digital environment.

Customers can stay ahead of threats by viewing ongoing and stopped DDoS attacks, analyzing potential risks, and exploring detailed insights such as visitor geography, source IPs, connection speeds, and more. The portal also provides access to detailed event logs, downloadable raw logs, and monthly reports for deeper analysis.

Resources

Datasheet

Nexusguard Origin Protection Datasheet

Download PDF
Download File

Nexusguard Origin Protection Datasheet

Download PDF

Whitepaper

Mejora de la seguridad del DNS con el servicio de protección DNS de Nexusguard

La creciente prevalencia y sofisticación de los ataques de denegación de servicio distribuido (DDoS) han cambiado radicalmente el panorama de la ciberseguridad. Los servidores DNS, que son una parte fundamental de la infraestructura de Internet, son ahora los principales objetivos de los actores malintencionados. Las organizaciones deben adoptar un enfoque proactivo para proteger su infraestructura de DNS a fin de garantizar operaciones ininterrumpidas, proteger los datos confidenciales y mantener la confianza de los clientes.

Read Now

Brindar protección de DNS de mayor valor y menor costo para el espacio educativo

Profundizamos en las funciones y capacidades integrales que ofrece el servicio Origin Protection de Nexusguard, diseñado para cumplir con los requisitos de los entornos a gran escala que administran redes extensas.

Read Now

Guía de soluciones: Cómo mejorar el uso de AWS con el servicio de protección DNS de Nexusguard

El objetivo de esta guía es demostrar la eficacia del servicio de protección de DNS de Nexusguard para reforzar la seguridad de su infraestructura de AWS contra los ataques de denegación de servicio distribuido (DDoS).

Read Now

El papel vital de la seguridad del DNS: una guía esencial

Para explicar qué es la seguridad del DNS y por qué es de suma importancia, esta guía analizará las amenazas frecuentes a su sistema de DNS, las mejores prácticas para reforzar su seguridad y las técnicas para detectar y abordar las vulnerabilidades de manera eficaz, protegiendo su infraestructura de DNS de posibles ataques.

Read Now

El costo de la seguridad contra DDoS

Nexusguard identifica y desglosa los costos de capital y operaciones directos e indirectos involucrados en la implementación y el mantenimiento de una estrategia de detección y mitigación de DDoS que funcione.

Read Now

Blog

Automatic filtering via Nexusguard SmartFilter, for intelligent mitigation

By combining automated mitigation with accurate Smart Detection, Nexusguard’s SmartFilter provides an intelligent approach to implementing cost-effective, fast-to-deploy, real-time protection against DDoS attacks.
Nexusguard
January 2, 2022

Enabling RPKI for a Safer Internet

With RPKI enabled, Nexusguard now ensures configuration mistakes and abuse by bad actors are eliminated, and BGP sessions for our customers and peers are fully validated.
Nexusguard
June 1, 2021

Smart Mode: DDoS Attack Detection using Machine Learning

Nexusguard’s Smart Mode detection uses Machine Learning techniques to predict whether network traffic coming from a source is legitimate or part of a malicious DDoS attack.
Nexusguard
August 27, 2020

The Best of Both Worlds: On-Premise and in the Cloud

By employing a hybrid solution, attack detection and mitigation kicks in immediately and automatically via the on-premise appliances that stop application attacks from crippling online services.
Nexusguard
August 21, 2020

Reaping the Benefits of DDoS Incident Handling Automation

Nexusguard’s Cloud Diversion App provides the complete set of tools you need to facilitate the automation of your incident handling workflows, expedite time-to-mitigation and optimize your overall security strategies.
Nexusguard
June 16, 2020

How to detect and mitigate Bit-and-piece, aka Carpet Bombing DDoS attack

Designed to protect large networks from L3/L4 attacks of all complexities, Nexusguard InfraProtect offers telcos and ISPs the ability to leverage Nexusguard's globally distributed infrastructure to be used as an off-site sandbox to perform traffic analysis, shaping and attack mitigation.
Nexusguard
May 27, 2020

Looking for Simpler DDoS Protection?

Protect your critical infrastructure effortlessly with Nexusguard’s reliable and easy-to-manage DDoS protection. Speak with one of our network security experts to learn how we can simplify your security operations and give you peace of mind.
Talk To Our Network Security Expert
Free Virtual Demo