Productos y servicios
/
DNS Protection

DNS Protection (DP)

Ensures 100% uptime and efficient resolution for secure domains.
Free Virtual Demo
Overview
Features
Resources

Always-On DNS Protection — Ensuring Fast, Reliable Domain Resolution

Nexusguard DNS Protection delivers always-on domain resolution through our globally distributed, high-capacity scalable DNS infrastructure. The fully redundant platform is engineered to absorb even the largest DNS-based DDoS attacks while maintaining uninterrupted service for legitimate users — ensuring 100% DNS uptime for critical websites and applications. Unlike usage-based models, our flat-fee pricing guarantees cost predictability even during sustained attacks, providing both operational resilience and financial transparency.

How it works

Our solution harnesses the power of Nexusguard's globally distributed network of scrubbing centers to swiftly and reliably resolve incoming DNS queries. By leveraging this robust infrastructure, we ensure that your online presence remains secure and operational, even in the face of malicious threats.Nexusguard offers two flexible deployment models designed to meet diverse infrastructure requirements — whether protecting specific domains or entire nameserver environments.

Hosting Model

Embedded image
Clients designate Nexusguard DNS as their secondary nameserver, transferring zone files via AXFR for robust protection. Authorized mapping is established through the DNS registry, concealing the client’s authoritative nameserver IP. Nexusguard’s cloud then manages legitimate DNS queries, filtering malicious traffic — ensuring full protection of DNS zones.

Reverse Proxy Model

Nexusguard DNS acts as the authoritative nameserver, working in conjunction with or replacing existing servers. It functions as a recursive server with cached data in the client's zone. If specific information is lacking, it queries upstream servers and caches responses. This model takes into consideration various attack vectors, offering continuous DDoS protection and an additional layer for TCP/UDP DNS traffic through Nexusguard's DP proxy service, maintaining name server protection.

Critical Features for Securing DNS Infrastructure

Always-On Protection

Cloud-hosted DNS domains for load sharing, ensuring continuous service amidst DDoS threats

Compliance with DNSSEC Mandates

Supports DNSSEC for data integrity and cryptographic DNS data authentication.

Supports AXFR

Functions as Primary/Secondary Name Server, facilitating AXFR for seamless data transfer.

Flat-Fee Structure

Transparent flat-fee pricing model shields businesses from unexpected cost spikes, even during periods of heightened DNS query activity

Uptime Assurance

Guaranteed 100% Availability SLA, ensuring uninterrupted service delivery and reliability.

Business-Driven Benefits for Reliable DNS Performance

Always-On Protection

Nexusguard's vast DNS server capacity ensures continuous protection against attacks
Nexusguard's vast DNS server capacity ensures continuous protection against attacks

Effortless Deployment

Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal
Easily set up and managed through Nexusguard's DNS Protection Service Customer Portal

Guaranteed  24/7 Availability

Ensures continuous connectivity to websites and applications for users
Ensures continuous connectivity to websites and applications for users

Robust DNS DDoS Protection

Defends against DNS DDoS attacks with military-grade protection
Defends against DNS DDoS attacks with military-grade protection

Cost Predictability

Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes
Nexusguard’s transparent flat-fee pricing ensures cost predictability, protecting organizations from unexpected costs during attack traffic spikes

Enhanced Data Integrity

Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
Nexusguard reinforces DNS Protection hosting security with DNSSEC and DANE integration
With Nexusguard's Bastions, I not only get faster onboarding but the freedom to be truly creative-building flexible packages that adapt to an ever-changing market. I can rely on Nexusguard's platform and team to deliver flawlessly every time, allowing us to meet customer needs with confidence.
William Manzione,
Product Manager, RETN
We want to make the network environment for our customer as safe as they feel at home. Nexusguard offers a customized internet security solution so that our customers can continue to interact with us the way supposed to be and the way they want to—all the way without interruption.
Visrut Manunpon
Chief Technical Officer, SNOC
We chose to partner with Nexusguard because of its specialty in DDoS mitigation. In fact, they not only focus on DDoS attacks, they are also curious about and strive to address the pain points they face.
Lee Shih Yen
VP, Cyber Security, StarHub
Our customers are extremely satisfied with Nexusguard DDoS Protection solutions because they have sophisticated tools that give them visibility into their networks. With Netpluz mitigation facility commissioned in Singapore, powered by Nexusguard, our customers can expect proactive and intelligent mitigations to ensure only clean traffic reaches their network.
Lau Leng Fong
CEO, Netpluz
The Nexusguard solution secures our network with enterprise-grade SLAs. Most importantly, it ensures all business-essential applications have the uptime that they require.
Michael Ng
Sales Director of REDtone
When we have queries and new service requests, the Nexusguard team were able to attend to us promptly. This is a good partnership that every business would want to ensure our business plans are implemented smoothly.
Saymon Araujo
Senior Network Analyst, Azion Technologies Inc.

FAQs

¿Por qué necesito protección contra DDoS en el servicio DNS?
Los ataques DDoS al DNS pueden sobrecargar los servidores y provocar interrupciones en el servicio. Nuestra protección mitiga estos ataques y garantiza la disponibilidad del servicio.
El DNS está alojado en un ISP, ¿qué debo hacer?

Si tu DNS está en un ISP, considera integrar nuestra protección mediante API o reenvío de DNS para protegerte de los ataques DDoS de forma eficaz.

¿Qué opciones están disponibles para los clientes?
Los clientes pueden elegir entre una variedad de niveles de protección que incluyen la limitación de velocidad, la detección de anomalías y el filtrado avanzado adaptado a sus requisitos de red.
¿Cómo se diferencia su servicio de los de la competencia?

Nuestro servicio se destaca por la enorme capacidad de los servidores DNS, los algoritmos de detección de anomalías perfeccionados y las políticas de protección personalizables, lo que nos diferencia en la industria.

¿Cómo se cobra por el servicio de protección contra DDoS?
Los precios se basan en factores como el volumen de tráfico, el nivel de protección y las funciones adicionales. Nuestro modelo de precios flexible garantiza la rentabilidad para las diferentes demandas de red.
Si soy un ISP o SI (System Integrator), ¿ofrecen una opción de franquicia para ofrecer servicios de protección contra DDoS?

Sí, ofrecemos una opción de franquicia para que los ISP y los SI brinden servicios de protección contra DDoS a sus clientes. Comuníquese con nosotros para obtener más información sobre las oportunidades de asociación.

Features

Open All
High-Performance DNS ResolutionResilient Cloud InfrastructureDANE IntegrationCompliance with DNSSECCustomer Portal
Select Features

High-Performance DNS Resolution

Open All
Close All
Distributed Name Servers

Deployable in ANYCAST mode, Nexusguard DNS Protection distributes traffic across globally distributed Points of Presence (PoPs). This architecture enhances speed, redundancy, and uptime, delivering optimal DNS performance even under heavy query loads.

Resilient Cloud Infrastructure

Open All
Close All
Nexusguard Cloud

Built around Nexusguard’s resilient cloud bandwidth, the DNS infrastructure effortlessly handles surges in traffic volume while maintaining low-latency responses — ensuring reliability during peak demand.

DANE Integration

Open All
Close All
DNS-Based Authentication of Named Entities

Nexusguard's DNS Protection service incorporates DANE (DNS-Based Authentication of Named Entities) to strengthen trust in encrypted communications. By binding SSL/TLS certificates to DNS records, the solution enforces rigorous cryptographic validation, eliminating reliance on third-party certificate authorities. This direct DNS-based authentication reduces the exposure to risks such as certificate impersonation, man-in-the-middle attacks, and various other certificate-related vulnerabilities. 

Compliance with DNSSEC

Open All
Close All
Domain Name System Security Extensions

Within DNS Protection hosting, Nexusguard reinforces security through DNSSEC, bolstering DNS integrity by verifying the legitimacy of domain data sources. DNSSEC eliminates the risk of DNS data tampering through the use of public key cryptography and digital signatures.

Customer Portal

Open All
Close All
Service Dashboard

Designed to provide complete visibility and control, the Customer Portal is a powerful, user-friendly platform for managing security and performance. Featuring an integrated dashboard and detailed analytics, it enables customers to view and configure detection and mitigation settings tailored to their specific service plans. From monitoring real-time traffic — including raw and clean bandwidth — to tracking network performance metrics like cached bandwidth and request volumes, the portal offers a comprehensive overview of their digital environment.

Customers can stay ahead of threats by viewing ongoing and stopped DDoS attacks, analyzing potential risks, and exploring detailed insights such as visitor geography, source IPs, connection speeds, and more. The portal also provides access to detailed event logs, downloadable raw logs, and monthly reports for deeper analysis.

Resources

Datasheet

Nexusguard Origin Protection Datasheet

Download PDF
Download File

Nexusguard Origin Protection Datasheet

Download PDF

Whitepaper

Guía de soluciones: industria de servicios financieros y ataques DDoS

Este documento analiza cómo la industria de servicios financieros se ve afectada negativamente por los ataques DDoS. Presentamos un análisis del impacto empresarial y varias soluciones a los problemas a los que se enfrenta la industria. El documento destaca las suites de protección de Nexusguard para aplicaciones y DNS.

Read Now

Sobrevivir al GDPR significa tener éxito en la nueva era de Internet

Para sobrevivir a las normas de datos del RGPD, las empresas deben prepararse con una tecnología que pueda defenderlas contra la violación de datos, la intrusión y la interrupción del servicio.

Read Now

DNSSEC: La cadena global de confianza

Este documento explica brevemente qué es DNSSEC, cómo funciona, cuáles son sus beneficios, cómo Nexusguard implementa DNSSEC y las mejores prácticas de administración de claves.

Read Now

Blog

Potenciando redes resilientes con la protección contra inundaciones de conexiones TCP de Nexusguard

El filtro de inundación de conexiones TCP de Nexusguard es una herramienta invaluable para proteger los recursos del servidor, mantener la disponibilidad del servicio y proteger los intereses de los usuarios legítimos.
Nexusguard
February 11, 2025

Protección contra DDoS para pequeños ISP inalámbricos con capacidades de enrutamiento limitadas

Al utilizar Fastnetmon para la supervisión del flujo local y el servicio de protección de origen de Nexusguard para mitigar los DDoS desde el principio, los WISP pueden proteger sus redes de los ataques DDoS de forma rentable.
Nexusguard
December 24, 2024

Proteja su infraestructura de red y enlace ascendente de Internet con Nexusguard Origin Protection

Nexusguard
June 12, 2024

Simplificación de las políticas de rutas de desvío de la nube para mejorar la eficiencia y la gestión de riesgos con Nexusguard On-Net

Mejore la resiliencia y la confiabilidad de su red contra los ataques DDoS volumétricos con Nexusguard On-Net, una solución integral que emplea un enfoque multifacético y aprovecha los enlaces ascendentes de Internet segregados, los anuncios de rutas automatizados y el rápido desvío del tráfico para proteger su infraestructura crítica.
Nexusguard
May 31, 2024

Enhancing Nexusguard Cloud Diversion with RPKI ROA

For route verification to be effective, Nexusguard validates ROAs created by their customers, ensuring all their routes are safe to announce to the Internet.
Nexusguard
March 14, 2022

Safeguarding Customer Assets with Nexusguard On-Net

Nexusguard’s enhanced Cloud Diversion method, On-Net, not only reduces network latency but also expedites time-to-mitigation, ensuring customer assets are protected at all times.
Nexusguard
February 27, 2022

Looking for Simpler DDoS Protection?

Protect your critical infrastructure effortlessly with Nexusguard’s reliable and easy-to-manage DDoS protection. Speak with one of our network security experts to learn how we can simplify your security operations and give you peace of mind.
Talk To Our Network Security Expert
Free Virtual Demo