Dynamic DNS Services with AddedScalability and Security
2Dynamic and Intelligent DNSDNS is the Foundation of the Internet• Improve web performance and browsing - Fast• Protect yo...
3Complete DNS Delivery and Protection                           BIG-IP Global Traffic Manager                             ...
4 The F5 Value of Complete DNS / Web Solution             Scalable 10x; 70%                    Denial of Service Mitigatio...
5      Larger, More Complex Web = More DNS/HTTP         • Fundamental change in the way apps. are used         • Every ima...
6Dynamic Site Response and App. Delivery             Data Center          DNS response time:          Without DNS Caching/...
7Slow Response on DNSSEC validation• Validating secure site responses require lots of steps  that slows response times• Fo...
8Complete DNS Security•••                                                                          http://f5.com          ...
9Dynamic DNS Infrastructure for Rapid Growthwith BIG-IP Global Traffic Manager (GTM)•   Robust, Flexible and Secure DNS In...
© 2012 F5 Networks, Inc. All rights reserved. F5, F5 Networks, the F5 logo, BIG-IP, ARX, FirePass, iControl, iRules, TMOS,...
Upcoming SlideShare
Loading in …5
×

F5's Dynamic DNS Services

3,688 views

Published on

F5 enhances suite of DNS services with added scalability and security. Complete DNS solution improves overall performance and reduces costs for enterprise customers.

Published in: Technology
0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
3,688
On SlideShare
0
From Embeds
0
Number of Embeds
99
Actions
Shares
0
Downloads
179
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

F5's Dynamic DNS Services

  1. 1. Dynamic DNS Services with AddedScalability and Security
  2. 2. 2Dynamic and Intelligent DNSDNS is the Foundation of the Internet• Improve web performance and browsing - Fast• Protect your site and reputation - Secure• Direct customers to right data center and clouds - Available• Reduce data center costs - Flexible © F5 Networks, Inc.
  3. 3. 3Complete DNS Delivery and Protection BIG-IP Global Traffic Manager DNSSEC BIG-IP GTM © F5 Networks, Inc.
  4. 4. 4 The F5 Value of Complete DNS / Web Solution Scalable 10x; 70% Denial of Service Mitigation Support client requests Complete DNS control and consolidates IT Access Denied: IPv6 to IPv4Route based on location and distribute load Secure DNS Query Responses http://f5.com © F5 Networks, Inc. Simple and Robust Cloud DNS and App Management
  5. 5. 5 Larger, More Complex Web = More DNS/HTTP • Fundamental change in the way apps. are used • Every image, add button, widget, link, etc. has a potential IP address lookup • Last 5 years, volume of DNS queries 2x+ (.com/.net) to 57B daily queries* © F5 Networks, Inc.*https://investor.verisign.com/releaseDetail.cfm?ReleaseID=591560 Visual by https://www.dnssec-tools.org/
  6. 6. 6Dynamic Site Response and App. Delivery Data Center DNS response time: Without DNS Caching/Resolving 300ms = Mobile 100ms = PCs With DNS Caching/Resolving 15ms Cloud 15ms Private Public 400ms = blink of an eye• ─• ─ © F5 Networks, Inc.
  7. 7. 7Slow Response on DNSSEC validation• Validating secure site responses require lots of steps that slows response times• For example: 15 steps!! http://isc.org A record for RRSIG record covering (ZSK) DNSKEY is signed by is verified by is signed by www.isc.org www.isc.org/A record for isc.org RRSIG record covering (KSK) DNSKEY record is verified by DS record is verified by is signed by isc.org/DNSKEY for isc.org for isc.org RRSIG record (ZSK) DNSKEY RRSIG record covering is verified by is verified by is signed by covering isc.org/DS record for org org/DNSKEY (KSK) DNSKEY DS record RRSIG record record for org is verified by for org is signed by covering org/DS is verified by (ZSK) DNSKEY RRSIG record covering (KSK) DNSKEY record for . is signed by ./DNSKEY is verified by record for . © F5 Networks, Inc. Example provided by infoblox.com
  8. 8. 8Complete DNS Security••• http://f5.com Data Center“A high-performance DNSSEC validation solution is going to be extremely important asmore and more sites deploy DNSSEC.” Cricket Liu, VP of Architecture at Infoblox © F5 Networks, Inc.
  9. 9. 9Dynamic DNS Infrastructure for Rapid Growthwith BIG-IP Global Traffic Manager (GTM)• Robust, Flexible and Secure DNS Infrastructure• Easily mitigate DNS DDoS Attacks• Support hybrid IP Environments• Complete DNS Security• Scale and manage DNS and Apps globally © F5 Networks, Inc.
  10. 10. © 2012 F5 Networks, Inc. All rights reserved. F5, F5 Networks, the F5 logo, BIG-IP, ARX, FirePass, iControl, iRules, TMOS, and VIPRION are registered trademarks of F5 Networks, Inc. in the U.S. and in certain other countries

×