What does Anti DDoS Pro mean, Anti DDoS Pro DNS resolution

Let me briefly ask you about it.

Anti-DDoS Pro means that the DNS server has a high resistance to attacks, especially against DDoS attacks. Many people think that DDoS attacks are only aimed at web servers, in fact, DNS servers will often suffer from DDoS attacks, general DNS servers due to small bandwidth, and do not have enough DDoS protection strategies, so when encountering more frequent DNS resolution queries or malicious DDoS attacks, it will cause bandwidth resource exhaustion, line congestion, and even server downtime, and DNS server downtime is more serious than web server downtime. It will make the domain name it governs unresolvable.

Anti-DDoS Pro usually has health monitoring capabilities, which can monitor the health status of the server in real time, and cooperate with load balancing and downtime switching strategies to ensure the normal operation of the server. In addition, Anti-DDoS Pro is equipped with a professional DDoS firewall, which can effectively deal with DDoS attacks, UDP floods, syn floods and other types of attacks.

DNS resolution is a service that points the domain name to the IP of the space, so that people can easily access the domain name through the registered domain name. People are accustomed to memorizing domain names, but machines only recognize each other's IP addresses, and there is a one-to-one correspondence between domain names and IP addresses, and the conversion between them is called domain name resolution, and domain name resolution needs to be completed by a dedicated domain name resolution server, and the whole process is carried out automatically.

When the production is completed and uploaded to the virtual host, you can directly enter the IP address in the browser to browse**, you can also enter the domain name query**, although the content is the same but the process of calling is different, the input IP address is directly from the host to call the content, the input domain name is through the domain name resolution server to the corresponding host IP address, and then from the host to call the content of **.

Uery Flood exhausts the destination DNS resources by continuously sending DNS request packets, resulting in a denial of service. The specific classification includes whether the source IP address is random and whether the destination domain name is random.

Response flood is a denial of service by continuously sending DNS response packets.

The underlying protocol of UDP FloodV DNS is UDP, and various FLOOD attacks based on UDP will also bring harm to DNS.

Refraction Attack (Reflection Attack) Forge the source IP address as a third party and use DNS packets to achieve the purpose of DoS to remove the third party. It is a means of "killing people with a knife".

Amplification Attack A type of refractive attack. Traffic amplification is achieved by maliciously constructing response packets, thus forming bandwidth attacks on third parties. Tens of bytes of request packets and several kilobytes of response packets mean that traffic amplification factors can be more than 100 times.

Cache poisoning Every DNS has a cache, and cache poisoning refers to the contamination of DNS caches by malicious means, resulting in DNS hijacking or denial of service.

Exploits exploit various vulnerabilities to hack and control DNS servers. Vulnerabilities are not only the DNS program itself, but can also be other "problem points" of the machine or network.

Social Engineering Methods All systems need to be maintained by people, and people are always the most vulnerable link in security.