Skip to content

Anycast DNS

We place your DNS zones on more than 40 name server locations worldwide in two independent clouds. Your customers reach you faster, and your domain is far more resilient against outages and DDoS attacks. DNSSEC is included; available per zone.

01

Your Benefits

5 points
B.01

Name resolution answers from the nearest location, so your website and mail reach customers worldwide faster

B.02

If a location fails or comes under attack, the others take over automatically and your domain stays reachable

B.03

Your zone sits in two separate name server clouds, so an outage at one operator does not take down the whole zone

B.04

DNSSEC is included and signs your zones against manipulated answers

B.05

Your records stay as they are. We switch the zone over and you carry on managing it as before

02

Service scope

6 Building blocks
L.01

We move existing zones from the Netsource DNS Service to the anycast name servers

L.02

Operation at more than 40 locations in two independent clouds, distributed via anycast routing

L.03

We sign the zone with DNSSEC and deposit the keys with the registry

L.04

All record types available in standard DNS: A, AAAA, ALIAS, CAA, CNAME, MX, NS, PTR, SRV, TXT, NAPTR

L.05

You continue to manage the zone in real time via the Netsource DNS Service (dns.netsource.de), or we do it for you

L.06

After the switch we check the delegation and the DNSSEC chain

03

Requirements and exclusions

What is needed and what is not included

→ Prerequisites

  • Your domain is managed by Netsource (NDS-DOM-DE) or transferred to us
  • At least one name server change at the registry. We carry it out, and the short switch-over normally causes no downtime

✗ Not included

  • For most domains the four redundant standard name servers from NDS-DOM-DE are sufficient. Anycast is worthwhile for international reach, high traffic or higher protection needs
  • This option covers name resolution only, not web or mail hosting
  • Protection against domain takeover is provided by separate building blocks, Registry Lock (NDS-DOM-REGLOCK) and DomainSafe (NDS-DOM-SAFE)
  • It does not replace web application or DDoS protection for the web servers themselves
[ NDS-DOM-ANYCAST ] [ netsource.de ]
Next step

Does this fit your business?

In 30 minutes we work out whether this service suits you. Free and without obligation.