Secure Internet DNS Appliance

External DNS servers deliver critical services to your company such as the Internet visibility for your customer, partners and employees, the external accesses to network applications or other indispensable services such as email or Web.

As a consequence of this fundamental role in the Information Technology (IT) components, external DNS servers are exposed to attacks from the Internet that require to be secured. It would be a dramatic problem for company profitability to lose electronic mail services or the Internet connections caused by external DNS attacks. EfficientIP brings reliable and scalable solutions for hardening your Internet DNS architecture.

Hardened DNS Appliance

SOLIDserver™ are based on a secure Appliance architecture. The SOLIDserver operating system is hardened, including only necessary services with the minimal open ports. Thus, minimizing security threats! An integrated stateful firewall, dedicated to DNS flows and service management, consolidates the security level by checking and limiting exchanges to the only necessary traffic.

Secure Data Stream

The security of DNS exchanges are guaranteed by the implementation of the state of art security protocols such as Transaction SIGnature (TSIG), Domain Name System Security Extensions (DNSSEC), Secure Sockets Layer (SSL), and SNMP v3. Advanced Access Control List (ACL) enables to control DNS server accesses: authorization of modifications, transfers and requests.

SOLIDserver™ supports multiple network interfacing combination such as: exploitation interface, management interface, and 802.1q Virtual LAN (VLAN) capabilities.

Disaster Recovery (DR)

The SOLIDserver™ Disaster Recovery management gives the capability to automatically re-build a DNS server that crashed. Thus it is possible to restart on the exact snapshot of the DNS configuration just before the unavailability. SOLIDserver™ GRID technology enables to backup in real time complete configuration from a SOLIDserver to other SOLIDserver™.

Simplify DNS Management

SOLIDserver™ is based upon an intuitive web interface for a quick and efficient access to all information in a glance. Web GRaphical User Interface (GUI) enables to manage your DNS services and your updates, backup and restores very efficiently. There is no compromise between an optimal security level and minimal operation costs. Through the multi criteria search engine you can filter targeted data for executing administration tasks, exporting it or just displaying it.

SOLIDserver™ is error-free: all configurations are uppermost checked to any deployment, ensuring service availability as well as an overall coherency control within your DNS architecture. SOLIDserver enables an unlimited level for delegating the administrations according to your organization. Each user has a strict limited access to his resources’ perimeter.

DNS State of the Art

Respecting the Internet naming, SOLIDserver™ is based on the last release BIND engine and fully compliant with its features and files configurations. Features for daily and advanced DNS admin tasks such as:

• Ability to switch DNS zone slave to master.
• Reorganize DNS view.
• Automatic reverse zone delegation.
• Resource Record (RR) mass update.
• Search RR across your whole —servers, views, zones— DNS data.
• Migrate, duplicate and rename DNS zone.
• Import/export DNS data.

Performance & Capacity

When a DNS restarts, it impacts the service delivery and can lead to heavy interruptions. EfficientIP's DNS service is configurable on-the-fly without restarting the server. This feature ensures you to create a new DNS zone and resource records (RR) immediately —in a sec— on DNS servers loaded with more than 100,000 zones and 1,000,000 RR.

• Queries per second: 82,000*
• Number of DNS RR: 2,000 000
• Number of DNS zones: 100,000

Compliant with

HTTP/HTTPS, SNMP v1-v2c-v3, OpenSSL, TSIG, DNSSEC, GSS-TSIG, BIND9.x, BIND8.x, BIND4.x, DNS anycast.

 

* Tested on a SOLIDserver with dual Quad Core Intel® Xeon® X5355