Get advanced DNS security with unmatched resiliency and performance.
Experience a highly scalable and flexible DNS security solution that provides:
Customize your primary and secondary DNS zones via APIs or tools such as Terraform through the Akamai Control Center.
Utilize optional DNSSEC features to prevent attacks caused by DNS forgery.
Provision, delegate, and update your zones — in the cloud or on-prem — through the Akamai Control Center to go live.
View and report on traffic and service availability, and monitor zones for brand spoofs and phishing domain names.
Akamai Shield NS53 is a reverse proxy solution that protects on-prem and hybrid DNS infrastructure — including GSLBs, firewalls, and nameservers — from resource exhaustion attacks. Customers can self-configure, manage, and enforce their own dynamic policies in real time.
Protect your DNS infrastructure from NXDOMAIN attacks in real time with self-configurable dynamic security policies.
Self-configure and manage your own security policies, rate controls, APIs, and zone transfers with an easy, intuitive UI.
Reduce latency and improve user experience with Akamai’s NAMES network, global IP anycast, and cached responses.
Many organizations under-deploy their DNS infrastructure and often depend on just two or three DNS servers to support their global operations. This can have a serious impact on DNS performance and leave their DNS deployment — and their entire web infrastructure — unable to scale, and increasingly vulnerable to data center outages and DNS-based distributed denial-of-service (DDoS) attacks. Edge DNS is built on Akamai’s extensive edge network, which is overscaled to handle peak traffic for all of our customers, even when under attack.
It is not uncommon for organizations to have some on-prem DNS nameservers and GSLBs for administrative or compliance requirements, and not be able to migrate all their zones to a cloud-based authoritative DNS solution. In such cases, Shield NS53, Akamai’s bidirectional reverse proxy service, offers comprehensive security from malicious attacks, and improves performance by enabling customers to self-manage policies, access control lists, and caching responses to alleviate the load on their on-prem DNS infrastructure.
IP anycast is a network addressing and routing methodology that allows IP addresses to be announced from multiple points on the internet. In the context of DNS, IP anycast describes how multiple nameservers will have the same IP address and respond to a DNS query made to that address, ensuring that the user always connects to the closest server for performance and availability.
Edge DNS does support DNSSEC. Customers that require support for DNSSEC should purchase the Secure Option of Edge DNS.
Edge DNS provides an availability SLA with guaranteed 100% uptime. Additionally, Edge DNS does not charge you any extra fees for DDoS-related traffic — which can be substantial, given the size of modern attacks.
Akamai understands that having a single solution for provisioning and configuration of both zone and traffic management can be important for our customers, which is why we are combining the capabilities of these two solutions into one. Now, with Edge DNS, you also have:
Learn how Akamai’s DNS security assists with these specific needs.
Edge DNS provides you with the scale and capabilities for normal operation, even when high-volume incidents are occurring, delivering nonstop availability of web applications and APIs. It also provides zone apex mapping and integrated traffic management with a 100% uptime SLA.
Leverage the scale and power of Edge DNS as a cloud-based authoritative DNS solution or combine it with Shield NS53 to protect and intuitively manage your on-prem and hybrid DNS infrastructure to unify your DNS security. Additionally, utilize Edge DNS and Shield NS53 with Prolexic — Akamai’s purpose-built DDoS protection platform — to protect your digital infrastructure across all layers, ports, and protocols.
Get management of DNS secondary zones on internet-facing DNS infrastructure and added protection for primary DNS resources, with a highly available secondary resource.
Get incisive insights from peacetime as well as under-attack traffic and performance of your DNS infrastructure to proactively plan and secure your online web presence.
Simplify and automate DNS workflows by integrating Edge DNS with standard DevOps toolkits and resources through APIs. Edge DNS distributes DNS queries to optimize response times and maintain availability in response to data center/server health, providing operational simplicity, optimal app/API performance, and high availability.
Discover the benefits of Edge DNS or Shield NS53 for yourself:
Set up your 30-day free trial:
Terms and restrictions apply.
