Explore
Exploring the business and technology issues our customers care about
DDoS Mitigation
DDoS attacks and internet volatility are on the rise.
Distributed Denial of Service (DDoS) attacks are a top concern for every IT organization. Regardless of your company’s size or industry, a DDoS attack can tarnish your reputation and impact your bottom line. DDoS attacks are easier to initiate and more difficult to mitigate than ever. Today any cybercriminal with internet access can use “attack-for-hire” groups to execute assaults for under $5. And with the advent of the Internet of Things (IoT), hackers are exploiting connected devices like webcams to launch massive-scale attacks.
DNS is a common target for DDoS attacks. Some attackers may try to overwhelm your DNS servers directly. Others may try to exploit your DNS systems to launch attacks on other elements of your IT infrastructure or on another company’s infrastructure. Either way, DNS-based DDoS attacks can impair your online applications and services, and disrupt business. The cost of a DDoS attack can quickly reach up to million dollars an hour in lost revenue and productivity for the average size company.
What is DDoS?
Distributed Denial of Service (DDoS) attacks are a flood of requests for service to DNS networks that prevent connections from legitimate users to legitimate sites and services.
What is DDoS Mitigation?
DDoS Mitigation is a service that allows organizations to isolate and avoid artificial traffic flooding from DDoS attacks so that legitimate traffic can get through.
Dyn's View
Security experts agree that online security and threat mitigation requires a layered approach. No one solution such as a firewall, intrusion prevention system or cloud-based scrubbing service can fully protect your online infrastructure against today’s increasingly large and sophisticated attacks. You can significantly improve your security posture by trusting the operation of your DNS infrastructure to a battle-proven managed DNS service provider.
Best-of-breed managed DNS providers operate resilient global anycast networks, employ full-time security experts, and take special precautions to proactively thwart and mitigate DDoS attacks. They do this on an almost daily basis.
Additionally, adding a secondary DNS service to your existing DNS solution can harden your defenses and optimize availability. If your primary DNS service is attacked or suffers an outage, the secondary service will keep your online business up and running at peak performance.
How Dyn Helps
As a network operator running one of the world’s largest and most dependable DNS networks, Dyn sees and successfully mitigates multiple DDoS attacks every week. We do this as a core part of our service for every managed DNS customer, rather than an expensive add-on service.
Global Resiliency and Scalability
Dyn’s global anycast network spans 18 data centers across five continents and leverages a mix of Tier 1 transit providers at each PoP. By maximizing our attack surface we can better absorb and mitigate threats. We also employ advanced pooling strategies to segregate customers and isolate attacks.
Round-the-Clock Monitoring and Remediation
Our in-house DNS and security experts proactively manage our network 24x7x365. We often detect and remediate attacks before they are even noticed by our customers. And in the event of a severe attack, we support secondary DNS services to keep your online business up and running.
Continuous Assessment and Improvement
We rigorously analyze every DDoS attack to improve our security posture going forward. Using data gathered from Dyn Internet Intelligence, we regularly update our routing and transit policies to bolster our defenses.
Want to learn more about Managed DNS?
Use our Managed DNS with traffic steering capabilities to help build your DDoS strategy. To learn more, check out our products section.