I agree with you, there are only two kinds of companies with the kind of DNS infrastructure that could withstand a large scale DDOS: 1. DNS hosting companies (

I agree with you, there are only two kinds of companies with the kind of DNS infrastructure that could withstand a large scale DDOS: 1. DNS hosting companies (Dyn, Amazon, etc.) 2. Large Internet companies (Yahoo, Google, etc.) And for sure not all of them! A former employer's public zone was hosted by a DNS hosting company that didn't use Anycast, didn't have a footprint outside US/EU, and seemed to have little to no idea when or why traffic spikes happened. So to do DNS really right you need a fair amount of money, some specialized expertise and knowledge of some non-DNSy things (Anycast, among others). I'm really not interested in hosting my own (public) DNS these days at work, it's just not worth the time and effort until you get gigantic. As with e-mail, there are specialists who can do it better than (most) places can. I do kind of worry about depending on one DNS provider, so I've tried to use two when possible. That's a whole other world of hurt though.