Front Page: Traficom
Front Page: Traficom
Menu

Distributed DNS is the best protection against denial-of-service attacks (DoS) on the domain name system. Anycast technology allows a single name server to be placed in multiple locations around the world.

Traficom offers fi-domain registrars a free-of-charge service to provide anycast secondary DNS for fi-domains and their holders.

Benefits of anycast DNS for domain holders:

  • Improved performance for fi-domains
  • Increased resilience for the name services of fi-domains
  • Faster response times to DNS queries, which means better availability for fi-domains

Domain names work through DNS queries

Under Traficom's Regulation, an fi-domain name must have at least two name servers to guarantee the performance of any related services (website or email). Traditionally, these name servers (often referred to as unicast name servers) mean one server in one location responding to all DNS queries coming into its IP address. In case this server faces a DDoS attack (distributed denial of service) or fails for some other reason, the server will be unable to respond to incoming queries. If the domain name associated with the query has no other name servers configured for it, the related services (website or email) stop working.

What is anycast DNS?

Anycast technology allows a single name server to be placed in multiple locations around the world. Anycast name servers consist of multiple nodes in a variety of different geographical locations all over the world by using internet routing. All nodes of an anycast server respond to the same domain name/IP address query. The response to the query comes from the node nearest to the query’s origin (based on so called routing hops on the internet) which means a speedier delivery of website content. If a node goes offline due to a DoS attack or some other reason, the other nodes continue responding to queries. This increases the resilience of services connected to a domain name (website or email) significantly.

When thinking about security, every domain name should have multiple geographically distributed name servers.

Anycast-karttakuva
Map image of Traficom Anycast geographically distributed name service

Start using anycast

Are you an fi-domain name registrar? Do you manage fi-domain names and name servers for your customers? Do you want to provide better information security and DDoS protection for your customers?

Traficom offers fi-domain registrars a free-of-charge service to provide anycast secondary DNS for fi-domains and their holders.

Start using anycast secondary DNS for free and protect your customers’ domains now!

1

Send us an email to fi-domain-tech@traficom.fi

2

Traficom creates an account to the anycast service portal and connects registrars to the service

3

Registrars setup anycast DNS for the fi-domains

4

Anycast DNS provides protection for fi-domains

Traficom provides technical support for the service at fi-domain-tech@traficom.fi.
Tel. +358 295 345 656 (Mon-Fri, 9–15)

Updated