DNS security
Why the domain can be the weakest link.
- Anycast DNS Explained: One IP, Many Locations
Anycast DNS announces one nameserver IP from many sites via BGP, so queries and DDoS traffic spread out. How it works, its limits and three dig tests you can run.
- DNS Amplification Attack: How It Works, How to Stop It
A DNS amplification attack multiplies traffic 28 to 54 times, according to CISA. How reflection works in principle, and the configs that close open resolvers.
- DNS DDoS Attack: When Your Nameservers Go Down
A DNS DDoS attack takes your domain offline while the web server keeps running. Three attack patterns, a TTL table and a nameserver diversity checklist.
- Secondary DNS: Set Up a Second Provider with TSIG
Secondary DNS mirrors your zone to an independent provider via AXFR/IXFR. A setup guide with BIND config, a TSIG key, SOA timers and three dig checks.