Akamai Fast DNS

Gain peace of mind from extending your DNS to the Edge with improved availability, performance, and resiliency against DDoS attacks

Cash Flows

- Mat Peck, CTO, CashFlows

We have never hosted our own DNS but take comfort in knowing that because of Akamai, our resolution services would not be compromised or sacrificed if we were attacked

What is Fast DNS?

Fast DNS

The importance of DNS reliability and availability cannot be overstated. When your DNS is attacked or goes out of service, your website and applications become unreachable, and that’s bad for your business. This is why relying solely on your own DNS servers, or on a single provider, makes your DNS — and by extension, your business — vulnerable.

Fast DNS is an authoritative DNS service that moves your DNS resolution to the cloud. Built on the Akamai Intelligent Edge Platform, Fast DNS is architected for performance and nonstop DNS availability, even through the largest DDoS attacks.

Fast DNS can be deployed as a primary or secondary solution with optional DNSSEC support to protect against DNS forgery and manipulation.

High Availability

Fast DNS features 24/7 availability and comes with a 100% uptime service level agreement (SLA), providing you with confidence that your customers and employees are always able

Global Reach

Akamai’s global Anycast network, distributed throughout 28 countries, accelerates DNS resolutions for users connecting to your sites and applications from anywhere in the world, providing the ultimate in DNS availability and response times.

Faster Web Experiences

Close proximity to the Akamai Intelligent Edge Platform, along with features such as zone apex mapping, often reduces DNS lookup times, translating directly to faster performance, particularly for websites also using Akamai Web Performance solutions.

Security

Between the massive scale offered by the Akamai Intelligent Edge Platform, traffic throttling for devices exhibiting suspicious behavior, DNSSEC, and a trust-based implementation model, Fast DNS is an effective mechanism for protecting your online business from the effects of DNS-based DDoS attacks and other threats.

Flexibility

Whether replacing or augmenting existing DNS, Fast DNS can be used for primary or secondary DNS. Support for features such as vanity name servers, IPv6, an intuitive user interface, and use of Akamai’s {OPEN} APIs make it simple to integrate and begin using Fast DNS.

IP Anycast

Provide a decentralized DNS service to end users that enables the creation of a logical name server comprising multiple physical servers deployed across multiple networks and continents.

Secure Implementation

Unlike other DNS solutions, Fast DNS is not based on Berkeley Internet Name Domain (BIND) software. Rather, Akamai’s DNS implementation is based on years of development experience with DNS protocols, resulting in an implementation protected from attackers looking to exploit vulnerabilities that have been exposed in BIND.

24/7 Availability, 100% Uptime SLA

Deliver around-the-clock DNS availability for users throughout the world through Akamai’s globally distributed authoritative DNS platform. Akamai’s SLA guarantees DNS service availability for users even in the event of natural or man-made disasters.

Zone Apex Mapping

Leverage the mapping data available from the Akamai Intelligent Edge Platform to reduce the overhead associated with CNAME chain lookups. Enable use of Akamai web acceleration solutions for DNS records at the zone apex for which CNAMEs cannot otherwise be used.

DNSSEC with Fast DNS Secure Option

Guard against DNS data forgery or manipulation with Akamai’s Domain Name System Security Extensions (DNSSEC) option for Fast DNS. Options include Serve DNSSEC for organizations wishing to manage their own keys, or Sign and Serve DNSSEC for organizations that would prefer to fully outsource their key management process.

IP Throttling

Suppress traffic from any IP address exhibiting suspicious behavior. Fast DNS monitors the level of DNS traffic from every IP address and automatically throttles traffic when it detects anomalies — an effective technique for mitigating DNS amplification or volumetric attacks.

Trust-Based Security

Protect against DDoS reflection attacks from spoofed IP addresses by only serving content to a list of well-known name servers, updated continuously based on the total web traffic delivered across the Akamai Intelligent Edge Platform.

Flexible Usage and Administration

Implement Fast DNS as either primary or secondary DNS. Add professionalism and security by using vanity names to rebrand Akamai name servers using your own domain names. Integrate IPv4 and IPv6 addressing as your organization transitions to IPv6. Initiate zone transfers using an intuitive GUI through the Akamai Control Center.

Third-Party Management

Manage your DNS configurations through Akamai’s {OPEN} application program interfaces (APIs) to automate the integration of Fast DNS with your existing management tools, workflows, and processes.

Primary or Secondary DNS

Deploying a few DNS servers in corporate or cloud data centers might work well for small organizations but is not a sound approach for enterprises whose businesses rely on the Internet. Fast DNS can be used to replace existing DNS infrastructure or to augment primary DNS with a cloud-based DNS that combines high availability, scale, and security

Highly Available Websites and Applications

Backed by a 100% uptime service level agreement (SLA), Akamai’s globally distributed Anycast network, consisting of thousands of servers deployed across 195 points of presence (PoPs) in 26 countries, practically assures 24/7 availability of DNS resources, regardless of where and when end users are connected.

Securing Your DNS

Between its distributed architecture, a secure implementation that doesn’t expose the vulnerabilities known to be present in open source DNS, and key features such as throttling and DNSSEC, Fast DNS offers superior defenses against DNS forgery and data manipulation, as well as against business-crippling DNS DDoS attacks.

Improving End-User Experiences

Reduced latency, resulting from the likelihood that a Fast DNS server is deployed close to your end users, leads to reduced page load times and better overall performance. Features such as zone apex mapping and vanity names also improve DNS lookups and tie in nicely with Akamai Web Performance solutions.

Resources