Welcome!

Containers Expo Blog Authors: Liz McMillan, Pat Romanski, Elizabeth White, Yeshim Deniz, Zakia Bouachraoui

Related Topics: @CloudExpo, Containers Expo Blog, SDN Journal

@CloudExpo: Blog Post

DNS for Today’s Distributed Infrastructure | @CloudExpo #API #Cloud #DataCenter

Data centers have seen a lot of change in a short time

Data centers have seen a lot of change in a short time. It used to be possible for organizations to run their service from a single data center and house their Domain Name Service (DNS) servers within it. It wasn't an issue to have them in the same place, since if the data center went down, the DNS servers wouldn't be of any use.

Of course, things aren't so simple now. Organizations use multiple data centers, sometimes in multiple countries, not to mention cloud regions and highly distributed networks. Consequently, your DNS needs to be just as highly distributed as your content. After all, what good is a Disaster Recovery site if you have no way to direct your users to it?

Using multiple anycast groups and hundreds of servers spread out across the globe, top-notch DNS providers today offer highly resilient networks. However, the hard reality is that impairments, outages and massive Distributed Denial of Service (DDoS) attacks can and do happen. To truly bulletproof your distributed infrastructure against an issue where your users cannot resolve your domain, you might very well consider hosting your DNS records with two providers.

That would seem like a clear-cut solution at first, but consider the details. Prior to today's dedicated DNS solutions, you basically had three choices:

  • Run one DNS provider as primary and the second as the replicated slave
  • Run two DNS providers, both as primary, and (carefully!) make your record changes in each
  • Run two DNS providers, both as primary, and code your own middleware application that is capable of understanding a requested DNS change and pushing that change to each provider's unique API

Choosing the first scenario means losing the powerful geographic routing, traffic management features and RUM-based telemetry that some top-tier providers offer. The use of the zone transfer (XFR) technology condemns you to using only the most basic, plain-vanilla DNS records.

The second scenario leaves you wide open to human error. If you don't painstakingly and laboriously keep two different providers in perfect sync, you will end up with traffic routing problems that are shockingly difficult to troubleshoot.

Choosing the third scenario means dedicating substantial time and money to writing your own DNS management software suite, with in-depth integration with each of your DNS providers. You lose all the advantages of your providers' portals and dashboards and will have to roll your own interpretation layer to keep one provider's advanced features in approximate synchronization with the next provider's.

Again, times have changed, and there is a fourth choice today. Dedicated DNS solutions allow you to place real or virtual servers anywhere you want: in your office, in your data centers, inside your DMZs, behind your firewalls - literally anywhere that makes sense for your infrastructure. You can then install a DNS software stack on them and turn them into fully managed DNS delivery nodes that are dedicated to you. Through the same portal and API as you use right now to manage your DNS on a managed DNS anycasted world-wide platform, you can choose which domains you want to also serve from your dedicated DNS nodes.

What this option affords is a situation where you have all the resiliency of two DNS providers with the ease of management through a single portal and API. All your advanced traffic management and intelligent Filter Chain configurations work exactly the same too. If something were to happen to any part of the managed DNS infrastructure, your dedicated DNS nodes would be unaffected and would continue to happily serve DNS. Once they had reestablished contact with the "mothership," they would push their queued query statistics upstream and apply any pending record changes.

Dedicated DNS nodes are thus authoritative DNS servers, and they also support recursion, so you can point all your DNS clients (laptops, servers, EC2 instances, etc.) at them. This results in all your DNS needs being met and queries directed at your own domains and records being resolved in single-digit millisecond time. You can also leverage advanced Filter Chain capabilities to intelligently direct traffic within your own data centers and achieve greater performance, failover and resiliency between server or application tiers.

Ask anyone who's tried it: running two different DNS providers is difficult at best and a recipe for disaster at worst. Fortunately, modern dedicated DNS solutions offer the benefits of having two DNS providers by combining the features of managed DNS and dedicated DNS solutions for a more well-rounded and easier-to-manage environment.

More Stories By Nate Lindstrom

Nate Lindstrom is the VP of Solutions Engineering for NS1, an intelligent DNS and traffic management platform with a data-driven architecture purpose-built for the most demanding, mission-critical applications on the Internet. He has significant experience building, operating, and securing cloud environments, and has put his expertise to work at companies including Yahoo! and Salesforce. As an evangelist, public speaker and consultant he enjoys helping companies get the most bang for their buck with AWS and other cloud computing solutions.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


IoT & Smart Cities Stories
Darktrace is the world's leading AI company for cyber security. Created by mathematicians from the University of Cambridge, Darktrace's Enterprise Immune System is the first non-consumer application of machine learning to work at scale, across all network types, from physical, virtualized, and cloud, through to IoT and industrial control systems. Installed as a self-configuring cyber defense platform, Darktrace continuously learns what is ‘normal' for all devices and users, updating its understa...
At CloudEXPO Silicon Valley, June 24-26, 2019, Digital Transformation (DX) is a major focus with expanded DevOpsSUMMIT and FinTechEXPO programs within the DXWorldEXPO agenda. Successful transformation requires a laser focus on being data-driven and on using all the tools available that enable transformation if they plan to survive over the long term. A total of 88% of Fortune 500 companies from a generation ago are now out of business. Only 12% still survive. Similar percentages are found throug...
Apptio fuels digital business transformation. Technology leaders use Apptio's machine learning to analyze and plan their technology spend so they can invest in products that increase the speed of business and deliver innovation. With Apptio, they translate raw costs, utilization, and billing data into business-centric views that help their organization optimize spending, plan strategically, and drive digital strategy that funds growth of the business. Technology leaders can gather instant recomm...
OpsRamp is an enterprise IT operation platform provided by US-based OpsRamp, Inc. It provides SaaS services through support for increasingly complex cloud and hybrid computing environments from system operation to service management. The OpsRamp platform is a SaaS-based, multi-tenant solution that enables enterprise IT organizations and cloud service providers like JBS the flexibility and control they need to manage and monitor today's hybrid, multi-cloud infrastructure, applications, and wor...
The Master of Science in Artificial Intelligence (MSAI) provides a comprehensive framework of theory and practice in the emerging field of AI. The program delivers the foundational knowledge needed to explore both key contextual areas and complex technical applications of AI systems. Curriculum incorporates elements of data science, robotics, and machine learning-enabling you to pursue a holistic and interdisciplinary course of study while preparing for a position in AI research, operations, ...
After years of investments and acquisitions, CloudBlue was created with the goal of building the world's only hyperscale digital platform with an increasingly infinite ecosystem and proven go-to-market services. The result? An unmatched platform that helps customers streamline cloud operations, save time and money, and revolutionize their businesses overnight. Today, the platform operates in more than 45 countries and powers more than 200 of the world's largest cloud marketplaces, managing mo...
Trend Micro Incorporated, a global leader in cybersecurity solutions, helps to make the world safe for exchanging digital information. Our innovative solutions for consumers, businesses, and governments provide layered security for data centers, cloud workloads, networks, and endpoints. All our products work together to seamlessly share threat intelligence and provide a connected threat defense with centralized visibility and investigation, enabling better, faster protection. With more than 6,00...
Tapping into blockchain revolution early enough translates into a substantial business competitiveness advantage. Codete comprehensively develops custom, blockchain-based business solutions, founded on the most advanced cryptographic innovations, and striking a balance point between complexity of the technologies used in quickly-changing stack building, business impact, and cost-effectiveness. Codete researches and provides business consultancy in the field of single most thrilling innovative te...
Codete accelerates their clients growth through technological expertise and experience. Codite team works with organizations to meet the challenges that digitalization presents. Their clients include digital start-ups as well as established enterprises in the IT industry. To stay competitive in a highly innovative IT industry, strong R&D departments and bold spin-off initiatives is a must. Codete Data Science and Software Architects teams help corporate clients to stay up to date with the mod...
In his session at 21st Cloud Expo, Raju Shreewastava, founder of Big Data Trunk, provided a fun and simple way to introduce Machine Leaning to anyone and everyone. He solved a machine learning problem and demonstrated an easy way to be able to do machine learning without even coding. Raju Shreewastava is the founder of Big Data Trunk (www.BigDataTrunk.com), a Big Data Training and consulting firm with offices in the United States. He previously led the data warehouse/business intelligence and Bi...