[dns-operations] about anti-ddos DNS hostings

[Mike Hoskins (michoski)]

On 6/11/15, 9:45 AM, "Kumar Ashutosh" <Kumar.Ashutosh at microsoft.com> wrote:


>@Kevin
>See if this interests you
>http://azure.microsoft.com/en-us/services/dns/


Or http://aws.amazon.com/route53/

I don't work for amazon, but have used route53 as a cheaper alternative to
Akamai.

Note neither of these are marketed as anti-DDoS as directly as services
like Akamai, but the way in which the services are deployed provides
better "protection" than your average hoster or individual.



>-----Original Message-----
>From: dns-operations [mailto:dns-operations-bounces at dns-oarc.net] On
>Behalf Of bert hubert
>Sent: Thursday, June 11, 2015 11:00
>To: Kevin C.
>Cc: dns-operations at dns-oarc.net
>Subject: Re: [dns-operations] about anti-ddos DNS hostings
>
>On Thu, Jun 11, 2015 at 12:06:54PM +0800, Kevin C. wrote:
>> Do you know which provider has a good anti-ddos systems and with a low
>> price for bulk zones? I will suggest him switch to there.
>
>No, this is something you can't offer right now. Geoff Huston's thinking
>on this is instrumental:


Yes and no.  Those with existing large estates/geo footprint supported by
other means than just selling DNS services are in a unique position to try.


>http://labs.apnic.net/?p=624
>
>"Defending your DNS is now a game that you only win if you can afford to
>win.


Generally agreed, and not just DNS...DDoS in general.  This view is
certainly older than May 2015, but becomes more true each day.

>