3 ms·
This is one of those services that a dedicated provider can sometimes do better than internal IT. Ultradns, for example, has secure secondaries Colocated with
by evgen 17y ago
This is one of those services that a dedicated provider can sometimes do better than internal IT. Ultradns, for example, has secure secondaries Colocated with large ISPs so you get some good protection against cache poisoning attacks. Everything they do you could do yourself, but it would cost you a lot more than what they charge. (full disclosure: I am a customer and until this evening I was quite happy with their service and reliability)
- newhouseb 17y ago"Colocated with large ISPs so you get some good protection against cache poisoning attacks" Ah yes, that's not something I factored into my equation. Thanks!
- count 17y agoAmazon IS a large ISP though...
- andrewvc 17y agoYep, they are, to all the tenants in AWS datacenters. My apartment however currently only can talk to Time Warner which talks to Level 3 and then, finally Amazon. I believe what the parent meant was that UltraDNS is colo'd with end-user ISPs like Time Warner, Verizon, etc.
- newhouseb 17y agoRight, a lot of DNS attacks rely on the attacker replying to a request faster than the actual DNS server and there's no one closer to the end user than ISPs.