Designing DNS for Availability and Resilience Against DDoS Attacks

Edge DNSDNSDNSDDoSAkamaiEdge DNSIP AnycastDDoS AkamaiDDoSEdge DNSDNS AkamaiEdge DNS DNS(CDN)AkamaiDNSDDoSAkamai ••1,000•140•40/ AkamaiAkamai Edge DNSDNSDNSAkamai Edge DNSDDoSIP Anycast IP Anycast Edge DNS1,000IP AnycastDNSIP AnycastIP AnycastDNS •- IP AnycastIPIP AnycastEdge DNSDNS •- Edge DNSDNSEdge DNSAkamaiDNSEdge DNSDNSDDoS •-IP AnycastEdge DNS IP AnycastAkamai DNSIP AnycastDNS IP AnycastDDoSDNSDNS Edge DNS Edge DNSIP AnycastEdge DNSEdge DNSDNS Edge DNS IP Anycast •-1001(ISP)DDoS •- Edge DNS 1DNS IP AnycastDNSEdge DNSIP AnycastDDoS Edge DNSIP AnycastDDoSIP Anycast DDoSEdge DNS IP AnycastIP AnycastDDoSEdge DNS Edge DNSEdge DNSEdge DNS2IP AnycastIP Anycast DDoS DDoSAkamaiEdge DNSAkamai3Akamai Akamai •-Edge DNSIP AnycastEdge DNSAkamaiIP Anycast •-Edge DNSEdge DNSAkamai AnycastAkamaiEdge DNS •-DDoSDDoSISPDNSEdge DNS • ISP-Edge DNSISPIP AnycastISP DNSIP AnycastISPISP •--ISPEdge DNS •Akamai-DNSAkamaiEdge DNSEdge DNSDDoSAkamai DDoS Edge DNSDNSDDoSDDoSDNSDNSAkamaiEdge DNSDNS •- Akamai DNSDNSEdge DNS1,000IP AnycastDDoSEdge DNSDNS •- Edge DNSIPDNSEdge DNSEdge DNS • DNS-Akamai95%DNSEdge DNSDNSDNS DDoSDNSDDoS1 Tbps AkamaiEdge DNSAkamaiEdge DNSAkamaiDNSAkamaiEdge DNS1%Edge DNSAkamaiDDoS Akamai DDoSEdge DNSEdge DNSAkamaiAkamaiDNSEdgeDNSAkamai DNSEdge DNS •CDN-Edge DNS AkamaiAkamai CDNAkamaiCDNAkamaiEdge DNSDDoS •-DNSCDNAkamaiDDoSDDoSAkamaiProlexicDDoSEdge DNSProlexicDDoSEdge DNS DNS Edge DNSDNSIP AnycastAkamaiDDoSEdge DNSDNSEdge DNSDNSEdge DNSDNS Edge DNSEdge DNS •-DNSEdge DNSDNSDNSEdge DNS APIEdge DNS •-DNSDNSAkamaiEdge DNSDNSDDoSDNSEdge DNS APIEdge DNS •-APIEdge DNSEdge DNSEdge DNSDNS DNSEdge DNSDNS(TTL)DNSStart ofAuthorityTTLDDoSEdge DNS(1)TTL(2)DNS Edge DNSDNSDNS DDoS1 TbpsEdge DNS100% ••IP Anycast•DDoS DDoS•AkamaiAkamai CDNProlexic DDoSDDoS DNSDNSDNSEdge DNS AkamaiAkamaiAkamaiAkamaiwww.akamai.com blogs.akamai.com202003