State of the Cloud DNS Report. Basic Edition July 2014

Transcription

1 State of the Cloud DNS Report Basic Edition July

2 Table of Contents Overview Introduction... 3 Anycast vs. Unicast DNS... 3 Provider Overview & Current News... 4 Provider Market Share...7 Technology Used... 9 DNS Features Health Checks - Failover Health Checks - Load Balancing Location Based Routing (Geo IP) Zone Based Routing (Anycast) DNSSEC Primary/Secondary DNS Support Pricing DNS Query Volume Pricing Feature Pricing DNS Propagation Latency DNS Performance Analysis (July 2014) Performance Analysis Overview Service Availability Synthetic DNS Response Time End-user DNS Response Time Akamai Amazon Route CloudFlare easydns DNS Made Easy Dyn...31 Ultra DNS NSONE DNS Networks Akamai Amazon Route CloudFlare easydns DNS Made Easy Dyn NSONE Ultra DNS State of the Cloud DNS Report 2014 CloudHarmony Inc. Table of Contents

3 Overview Introduction... 4 Anycast vs. Unicast DNS... 4 Provider Overview & Current News... 5 Provider Market Share... 8 Technology Used State of the Cloud DNS Report 2014 CloudHarmony Inc.

4 Introduction The Domain Name System (DNS) is the method by which meaningful hostnames such as are translated into physical IP addresses needed by computers to communicate; DNS is fundamental to the operation of the Internet. If an organization loses its DNS capabilities, their hostnames will be inaccessible to users even if the servers are functioning! Additionally, DNS can be a potential security threat if hacked and hostnames are redirected to unauthorized servers. Because of the mission critical nature of DNS, many organizations have elected to outsource their DNS needs to providers that can typically ensure better availability, improved security, and faster performance. Anycast vs. Unicast DNS At the network level, there are 2 methods of deploying DNS: Unicast and Anycast. Unicast DNS Anycast DNS has significant advantages over Unicast DNS. With Unicast DNS, information is routed to a single network destination, which is identified by a unique address; inherently, this means there is only one path data can take to reach its intended destination. Unicast methodology employs a one-to-one relationship between the destination address and the network endpoint each destination address is only able to identify a single endpoint. If a Unicast DNS server goes down, name server resolution directed at it will be non-functional which may result in descreased performance and possibly service disruptions. Anycast DNS On the other hand, IP Anycast DNS provides multiple routes that queries can travel to reach their intended destination there are a group of possible receivers, which are all identified by the same end destination address. Anycasting employs a oneto-one-to-many association; data is routed topologically to the nearest geographic node, which increases performance. Anycast DNS methodology also has the benefit of redundancy; if a DNS node goes down down, another can immediately take over and respond to queries for it. Anycasting replicates the same DNS data to multiple servers around the world, which also provides protection in the case of denial-of-service (DoS) attacks. In terms of reliability, speed, and security, Anycast DNS is generally a better choice. DNS LONDON DNS LONDON NEW YORK DNS MADRID NEW YORK DNS MADRID MIAMI MIAMI 4 State of the Cloud DNS Report 2014 CloudHarmony Inc. Overview

5 Provider Overview Akamai Akamai is based in Cambridge, MA. It was incorporated in 1998 after its founders developed a solution at MIT for improving Internet content delivery performance. It provides CDN services to one out of three Global 500 companies, and delivers 15-30% of all Web traffic. Yahoo! was its first customer, and many large media companies use the Akamai CDN. Additionally, Rackspace and HP resell Akamai CDN as part of their cloud offerings. Akamai has employees, and revenue for 2012 was $1.374 billion. Akamai does not provide specific details about the location of CDN PoPs, but it has publicly disclosed the size of its CDN network as over 127,000 servers in 81 countries. In some cases, Akamai partners with ISPs to maintain edge servers within their data centers, thus decreasing ISP bandwidth costs while improving performance for end users. In addition to CDN, Akamai also offers managed DNS hosting. Key differentiators include the largest CDN network in the world, a track record supporting some of the largest media clients, and serving Internet content at a massive scale. CloudFlare CloudFlare is a privately held company based in San Francisco, CA. It was founded in 2009 and announced the launch of its public beta at TechCrunch Disrupt in The founders are former engineers for Project Honey Pot, a system for identifying spammers. CloudFlare has raised over $22 million in funding since It has 35+ employees and unknown revenue. CloudFlare manages its own IP Anycast network consisting of 23 global points of presence (PoPs), with 10 in the US, 8 in Europe, 4 in Asia and 1 in Australia. Services include CDN, managed DNS, and some proprietary capabilities built on top of those services, including automated security and optimization. Key differentiators include extensive experience dealing with and mitigating DDoS attacks (including one of the largest attacks in Internet history, a 300 Gbps attack in 2013 against Spamhous); management of its own global IP Anycast network; a free starter plan; and seamless add-on capabilities, including automatic security and failover protection, and website optimization. Amazon Web Services (AWS) Overview Amazon Route 53 is part of Amazon s suite of cloud related services. Amazon was founded as an online bookstore in 1994 by Jeff Bezos, and the Amazon.com site launched in Amazon currently has 33,700 employees and earned $ Billion dollars in revenue in It is speculated that AWS will be the first $1 billion cloud computing service. DNS Made Easy Overview DNS Made Easy launched in 2002 and is a subsidiary of Tiggee LLC. DNS Made Easy processes more than five billion queries daily. DNS Made Easy s parent company, Tiggee LLC was founded in DNS Made Easy offers a free 30 day trial of their services. 5 State of the Cloud DNS Report 2014 CloudHarmony Inc. Overview

6 Provider Overview Dynamic Network Services (Dyn) Overview Dyn originally began as a free service by a group of college students back in 1998, and officially became a company in They are now a leader in Internet performance solutions offering Traffic Management, Message Management and Performance Assurance for some of the leading brands on the web. Dyn s headquarters are located in Manchester, NH and they have offices in San Francisco and Brighton, UK. Dyn has nearly 300 employees. In addition to DNS, Dyn also provides delivery service, API integration, DNSSEC and IPv6 support, active failover, as well as traffic balancing and load management. UltraDNS Overview Neustar has been in business since 1996 as a trusted, neutral provider of real-time information and analysis to the Internet, telecommunications, information services, financial services, retail, media and advertising sectors. In 1999, Neustar acquired UltraDNS and has continued to be a leader in the Enterprise Managed DNS ever since. In 2012, Neustar earned $831.4M (a 34% growth from 2011) and continues to expand its technology solutions through strategic acquisitions of Targus INFO (On-Demand Audience Target & Analysis), Evolving System (Number Solutions) and Aggregate Knowledge (Media Intelligence & Analytics). easydns Overview easydns is a Canada-based, private, self funded company in business since easydns has over 110,000 domains in more than 100 countries around the world, and processes approximately a quarter-billion DNS queries every day. NSONE NSONE provides a data-driven managed DNS platform. The NSONE platform provides the ability to incorporate realtime data feeds into intelligent DNS rules. Rules supported include health checks, load balancing and geo targeting. 6 State of the Cloud DNS Report 2014 CloudHarmony Inc. Overview

7 Provider Market Share To track market share, we mine the name servers for the Alexa top 10,000 sites monthly. Alexa tracks top sites based on number of visitors and traffic statistics and is generally seen as a reliable source for this data. The tables below provide market share snapshots for DNS providers based on our independent mining. To generate market share we use a combination of hostname, IP and ASN matching techniques for both primary and secondary domains (e.g. company.com AND Market share changes may be attributed to changes in the makeup of the Alexa top 10,000 sites or provider changes. Alexa Top 1,000 Sites Fortune 500 This content is available in the Premium Edition available at Alexa Top 10,000 Sites 7 State of the Cloud DNS Report 2014 CloudHarmony Inc. Overview

8 Market Share Growth/Loss Top 20 Provider Changes As part of our Alexa market share analysis, we also track Alexa top 10,000 sites that have changed DNS providers since the previous month s analysis. The following is a list of the top 20 websites (ordered by Alexa rank) that have changed providers in the past 4 months. This content is available in the Premium Edition available at 8 State of the Cloud DNS Report 2014 CloudHarmony Inc. Overview

9 Technology Used DNS Software DNS Software is the respond to queries requesting a hostname be transferred to an IP address. DNS providers can utilize off-the-shelf or proprietary software. Off-the-shelf software has the advantage of established stability and performance, while proprietary software can oftentimes provide better security and provide a point of distinction for vendors. Provider Software Type Akamai Proprietary DNS Made Easy Proprietary (Elite Resolution Platform) Dyn Bind easydns Bind NSONE Proprietary Route 53 djbdns UltraDNS Proprietary Geo IP Database In order to implement Geo-Targeted, Location Based DNS, providers will typically license Geo IP technology from one of two major vendors: MaxMind or Neustar IP Intelligence. These databases allow DNS providers to determine the geographic location of DNS resolvers (which are generally in the same geographic location as end-users), and provide a custom geo-targeted response. The following table provides a breakdown of the Geo IP technology used by each provider that supports this feature (Note: Anycast Zone Based DNS does not require this technology). Provider Software Type Akamai Unknown DNS Made Easy NA Dyn Maxmind easydns NA NSONE MaxMind Route 53 NA UltraDNS Neustar IP Intelligence 1 1. Both UltraDNS and Neustar IP Intelligence are part of the same parent company, Neustar 9 State of the Cloud DNS Report 2014 CloudHarmony Inc. Overview

10 DNS Features Health Checks - Failover...11 Health Checks - Load Balancing...11 Location Routing (Geo IP) Zone Routing (Anycast) DNSSEC State of the Cloud DNS Report 2014 CloudHarmony Inc.

11 Health Checks Failover Health Checks Load Balancing DNS Failover resolves hostnames based on the availability of target hosts. Hosts are monitored for availability using ICMP (Internet Control Message Protocol) or more advanced methods such as verifying that a HTTP server is functioning. If the primary host fails health checks, DNS can be automatically reconfigured to resolve to a backup host; routing is automatically restored to the primary host when it regains availability. PRIMARY DNS FAILOVER Like DNS Failover, DNS Load Balancing monitors the status of DNS hosts. However, with Load Balancing there are no active and failover hosts instead, all hosts receive evenly (or weighted) distributed traffic (weighted traffic distribution is an optional capability of this feature). HOST 1 HOST 2 DNS HOST 3 Provider Failover Provider Load Balancing Akamai Akamai DNS Made Easy DNS Made Easy Dyn Dyn easydns easydns NSONE NSONE Route 53 Route 53 UltraDNS 1 1. Only 15 minute monitoring intervals supported. For Enterprise plan, after 3 failover zones, fee is $5/zone/month. UltraDNS 11 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Features

12 Location Routing (Geo IP) Zone Routing (Anycast) Location Based DNS allows a DNS record Anycast Zone Based DNS is functionally to resolve differently based on the user s similar to Location Based DNS. However, location (or more specifically, the user s the former uses Anycast zones instead of DNS resolver location). To accomplish this, Geo IP technology. In practice, this limits the geographic location is determined the number of definable location based using Geo IP technology like Neustar IP rules definable to the number of provider Intelligence or MaxMind. This location is DNS Anycast zones. For example, Dyn s Anycast DNS then run through custom geographic DNS Zone Based DNS (GSLB or CDN Manager) rules. For example, DNS could resolve to a allows users to define up to 7 rules per server in Singapore for users in Asia and to hostname corresponding to each Dyn a server in the US for all other users. Anycast zone: US West, US Central, US East, EU West, EU Central, EU East and Asia. In this regard, Anycast Zone Based CALIFORNIA WASHINGTON,DC DNS is more restrictive than Geo Location Based DNS which may allow users to define rules based on individual states or even cities. Additionally, IP Anycast routing can be problematic in some areas like Provider Akamai Geo IP Asia resulting in incorrect responses (e.g. an Asia user may be routed to a US DNS server - and hence resolve to a US, not Asia rule). DNS Made Easy Dyn easydns NSONE Provider Akamai DNS Made Easy Geo IP (BETA, 4 Regions) Route 53 1 UltraDNS 1. Route53 provides a unique DNS routing feature called Latency Based Routing wherein users are directed to an AWS endpoint with the lowest latency (endpoint must be in one of the 7 AWS regions). Dyn easydns NSONE Route 53 (7 Regions) (4 Regions) UltraDNS 1 1. Discontinued service in favor of more effective Directional (Location Based) services. 12 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Features

13 DNSSEC DNSSEC (Domain Name System Security Extensions) is a specification for securing DNS information DNSSEC was designed to protect clients from forged DNS responses. All responses in DNSSEC are digitally signed; by checking the digital signature, a DNS client is able to verify the information is exactly the same as the information from the authoritative DNS server. The DNSSEC standard is backwards compatible with DNS, clients that do not support it are not affected adversely. Although more and more organizations are now rolling out DNSSEC on their name servers, the actual number of signed zones is still very low. DNS CLIENT PROVIDER or USER Provider Provider Managed User Managed Akamai DNS Made Easy Dyn easydns NSONE Route 53 UltraDNS Provider or User Managed DNSSEC Manual generation and management of necessary DNSSEC certificates and digital signatures can be very complex and cumbersome. Some providers simplify this by automating these tasks within their management interface. 13 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Features

14 Primary/Secondary DNS Support BIND DNS software defines an industry standard method for sharing DNS zone records between multiple servers. This protocol utilizes a primary or master server to manage changes to DNS records, and one or more secondary or slave servers that automatically stay in sync with the master. Both primary and secondary servers respond to DNS queries in the same way. WORMHOLE. MOVIE.EDU MOVIE.EDU PRIMARY MASTER TERMINATOR.MOVIE.EDU ZONE TRANSFERS ZARDOZ. MOVIE.EDU The following tables depict support by each service for primary and secondary DNS synchronization per BIND standards: When Service is Primary Provider AXFR IXFR NOTIFY TSIG Akamai DNS Made Easy Dyn easydns Secondary servers synchronize to the master using zone transfer requests. BIND defines two types of such requests: AXFR: transfer the entire DNS zone configuration IXFR: transfer incremental changes NSONE Route 53 UltraDNS When Service is Secondary BIND also defines two methods secondary servers may use to determine when to synchronize from the master: Polling: Secondary servers periodically query the master server for changes NOTIFY: The master server notifies secondary servers when changes are made Provider AXFR IXFR NOTIFY TSIG Akamai DNS Made Easy Dyn easydns DNS transfers between primary and secondary servers can be secured using Transaction SIGnature (TSIG) keys supported by some services. NSONE Route 53 UltraDNS 14 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Features

15 Pricing DNS Query Volume Pricing Feature Pricing State of the Cloud DNS Report 2014 CloudHarmony Inc.

16 Pricing (July 2014) DNS pricing for some vendors is often a black box. While some providers provide public pricing and self sign-up, others require contact and negotiation with sales executives. In the case of the latter, pricing can flucuate greatly depending on purchase size, negotiating prowness, the time of the quarter, and other extraneous factors. The pricing matrix below provides a breakdown of estimated costs at various usage levels with each provider. To collect this information, we have independently researched and contacted vendors that do not disclose pricing publicly. DNS Query Pricing Pricing Per Month This content is available in the Premium Edition available at 16 State of the Cloud DNS Report 2014 CloudHarmony Inc. Pricing

17 Advanced Feature Pricing (July 2014) Each provider markets and prices the add-on features in this report slightly differently. In the matrix below, we ve attempted to provide comparable pricing for each provider and feature; footnotes are included where applicable. Pricing Per Month This content is available in the Premium Edition available at Summary There is a lot to consider when comparing managed DNS providers. We ve included what we believe to be a few relevant, objective and comparable evaluation criteria in this post and our new DNS report. Organizations should consider the criteria that are most relevant to them when evaluating providers. 17 State of the Cloud DNS Report 2014 CloudHarmony Inc. Pricing

18 DNS Propagation Latency DNS Propagation Latency State of the Cloud DNS Report 2014 CloudHarmony Inc.

19 DNS Propagation Latency DNS propagation latency is the amount of time required for a DNS change to be pushed to global provider POPs. Measurements are provided for both primary and secondary DNS zones (where secondary DNS hosting is supported). The latency measurement provided is a median of measurements from 120 test nodes. Primary Zone This content is available in the Premium Edition available at Secondary Zone 19 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

20 DNS Performance Analysis Performance Analysis Overview Service Availability Synthetic DNS Response Time End-user DNS Response Time Akamai Amazon Route CloudFlare DNS Made Easy Dyn...30 easydns NSONE Ultra DNS State of the Cloud DNS Report 2014 CloudHarmony Inc.

21 Performance Analysis Overview The performance analysis in this report is separated into 3 categories: service availability, synthetic response times, end-user DNS response times; this data is captured utilizing a combination of the CloudHarmony browser-based DNS test ( and testing conducted using CloudHarmony s network of 110 globally deployed monitoring nodes. Service Availability The following table provides service availability metrics for the past 30 days. These metrics are based on monitoring of name servers for each managed DNS service using geographically disperse monitoring nodes. A minimum of 3 nodes are used in each geographical region listed. As long as at least 1 name server is reachable and responds to a DNS query the service is considered available. Outages are only triggered if all 3 monitoring nodes (each located on different networks) are simultaneously unable to connect to any name server for a given service. Because of the inherent redundancy of DNS, such outages are rare. We use an external monitoring service, Panopta, to conduct our service availability checks. Service Global US West US Central US East Europe Asia Oceania Africa Akamai DNS 100% 100% 100% 100% 100% 100% 100% 100% CloudFlare DNS 100% 100% 100% 100% 100% 100% 100% 100% DNS Made Easy 100% 100% 100% 100% 100% 100% 100% 100% Dyn 100% 100% 100% 100% 100% 100% 100% 100% Easy DNS 100% 100% 100% 100% 100% 100% 100% 100% NSONE 100% 100% 100% 100% 100% 100% 100% 100% Route % 100% 100% 100% 100% 100% 100% 100% UltraDNS 100% 100% 100% 100% 100% 100% 100% 100% 21 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

22 Synthetic DNS Response Time We monitor sythetic DNS response times using a combination of dig (a DNS utility) and our network of 110 global monitoring nodes. The purpose of this testing is to measure the amount of time it takes for provider DNS servers to respond to queries from these nodes. These measurements are taken every 5 minutes from each monitoring node. During each test interval, multiple measurements are taken and the median, mean, min, max and standard deviation metrics are captured. The response times used in the graphs below are derived from the median values and aggregated into multiple geographic regions. North America: 80 Monitoring Nodes US West US Central US East Canada Median Median DNS Lookup (ms) Akamai DNS AWS Route 53 CloudFlare DNS DNS Made Easy Dyn Easy DNS NSONE UltraDNS 22 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

23 Synthetic DNS Response Time continued Europe: 45 Monitoring Nodes 200 Western Europe Central Europe Eastern Europe Median 150 Median DNS Lookup (ms) Akamai DNS AWS Route 53 CloudFlare DNS DNS Made Easy Dyn Easy DNS NSONE UltraDNS Other Regions: 30 Monitoring Nodes 400 Asia/APAC Oceania South America Median 300 Median DNS Lookup (ms) Akamai DNS AWS Route 53 CloudFlare DNS DNS Made Easy Dyn Easy DNS NSONE UltraDNS 23 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

24 End-User DNS Response Time To collect end-user DNS response time, we created a browser-based DNS test at: We allow users to run this test for free, and pay users to run it using Amazon s Mechanical Turk. This test is also run using javascript tags on a few high traffic websites. To deploy this test, we delegated DNS for a domain with each DNS provider, and configured a wildcard DNS name (A) record for each. The test alternates downloading a 5 byte javascript file using cached and uncached random hostnames. End-User DNS response time is calculated as the difference between these measurements. Multiple response time samples are taken during each end user test, and the median and standard deviation are captured. Outlier response times above 1 second are discarded. The response times used in the graphs below are derived from a 90th percentile of the median values aggregated into multiple geographic regions. The purpose of this section is to present DNS performance from an enduser s perspective. This differs from synthetic response times in that it incorporates a more holistic, real-world metric that includes both DNS query time and latency between actual users and DNS provider nameservers (including the entire recursive DNS chain). The end-user response time heatmaps provide global performance analysis for individual providers. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. North America This content is available in the Premium Edition available at 24 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

25 End-User DNS Response Time continued Europe This content is available in the Premium Edition available at Other Regions 25 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

26 End-User DNS Response Time Akamai This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 2709 US Central % 1513 US East % 2917 Canada % Western Europe % 2731 Central Europe % 1541 Eastern Europe % 3738 Asia/APAC % 5502 Oceania % 462 South America % 449 This content is available in the Premium Edition available at 26 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

27 End-User DNS Response Time Amazon Route 53 This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 5821 US Central % 3629 US East % 5165 Canada % Western Europe % 5333 Central Europe % 2790 Eastern Europe % 2499 Asia/APAC % 9438 Oceania % 1502 South America % 1097 This content is available in the Premium Edition available at 27 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

28 End-User DNS Response Time CloudFlare This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 5294 US Central % 3089 US East % 4968 Canada % Western Europe % 5229 Central Europe % 2919 Eastern Europe % 2880 Asia/APAC % Oceania % 1331 South America % 834 This content is available in the Premium Edition available at 28 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

29 End-User DNS Response Time DNS Made Easy This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 7812 US Central % 4184 US East % 6917 Canada % Western Europe % 7807 Central Europe % 3897 Eastern Europe % 3565 Asia/APAC % Oceania % 1923 South America % 1335 This content is available in the Premium Edition available at 29 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

30 End-User DNS Response Time Dyn This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 5083 US Central % 2416 US East % 4595 Canada % Western Europe % 5024 Central Europe % 2597 Eastern Europe % 2403 Asia/APAC % 8667 Oceania % 1214 South America % 771 This content is available in the Premium Edition available at 30 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

31 End-User DNS Response Time easydns This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 2414 US Central % 1286 US East % 2601 Canada % Western Europe % 2419 Central Europe % 1429 Eastern Europe % 3728 Asia/APAC % 5158 Oceania % 415 South America % 376 This content is available in the Premium Edition available at 31 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

32 End-User DNS Response Time UltraDNS This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 553 US Central % 334 US East % 645 Canada % 3058 Western Europe % 563 Central Europe % 352 Eastern Europe % 133 Asia/APAC % 416 Oceania % 100 South America % 75 This content is available in the Premium Edition available at 32 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

33 End-User DNS Response Time UltraDNS This chart provides global performance analysis. Regions are color coded according to the average performance in that region. Green indicates faster and red slower DNS response times for users within those regions. Region Median Mean Std Dev Number of Tests US West % 2391 US Central % 1425 US East % 2829 Canada % Western Europe % 2737 Central Europe % 1423 Eastern Europe % 1157 Asia/APAC % 2813 Oceania % 383 South America % 347 This content is available in the Premium Edition available at 33 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Performance Analysis

34 DNS Networks Akamai Amazon Route CloudFlare DNS Made Easy Dyn easydns...40 NSONE Ultra DNS State of the Cloud DNS Report 2014 CloudHarmony Inc.

35 Provider Network Akamai Akamai Akamai has not disclosed specific locations of DNS POPs. Akamai maintains 20 Anycast DNS clusters each with different POPs and customers are assigned to a subset of these. ACTUAL ESTIMATED PLANNED SPECIAL 35 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks

36 Provider Network Amazon Route 53 Amazon Route POPs in 37 locations North America South America Europe Asia North America South America Amsterdam, NL [2] Singapore, SG [2] Ashburn, VA US [3] Rio De Janeiro, BR Dublin, IE Chennai, IN Atlanta, GA US Sao Paulo, BR Frankfurt, DE [3] Hong Kong, HK [2] Dallas, TX US [2] London, GB [3] Manila, PH Hayward, CA US Madrid, ES Melbourne, AU Jacksonville, FL US Marseille, FR Mumbai, IN Los Angeles, CA US [2] Milan, IT Osaka, JP Miami, FL US Paris, FR [2] Seoul, KR New York, NY US [3] Stockholm, SE Sydney, AU Newark, NJ US Warsaw, PL Taipei, TW Tokyo, JP [2] ACTUAL ESTIMATED PLANNED SPECIAL 36 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks

37 Provider Network CloudFlare CloudFlare 28 POPs North America South America Europe Asia Ashburn, VA US Sao Paulo, BR Amsterdam, NL Hong Kong, HK Chicago, IL US Frankfurt, DE Seoul, KR Dallas, TX US London, GB Singapore, SG Los Angeles, CA US Madrid, ES Sydney, AU Miami, FL US Milan, IT Tokyo, JP New York, NY US Paris, FR Reston, VA US Prague, CZ San Jose, CA US Stockholm, SE Seattle, WA US Vienna, AT Warsaw, PL ACTUAL ESTIMATED PLANNED SPECIAL 37 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks

38 Provider Network DNS Made Easy DNS Made Easy 15 POPs North America South America Europe Asia Ashburn, VA US Sao Paulo, BR Amsterdam, NL Hong Kong, HK Chicago, IL US Frankfurt, DE Sydney, AU Dallas, TX US London, GB Los Angeles, CA US Miami, FL US New York, NY US Reston, VA US San Jose, CA US Seattle, WA US ACTUAL ESTIMATED PLANNED SPECIAL 38 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks

39 Provider Network Dyn Dyn 18 POPs North America South America Europe Asia DFW SAO AMS BOM EWR FRA HKG IAD LON SIN LAX WAW SYD MIA TYO ORD PAO SEA ACTUAL ESTIMATED PLANNED SPECIAL 39 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks

40 Provider Network EasyDNS EasyDNS 17 POPs North America South America Europe Asia Ashburn, VA US NA Amsterdam, NL Hong Kong, HK Chicago, IL US London, GB Sydney, AU Los Angeles, CA US Paris, FR Tokyo, JP Miami, FL US Zurich, CH Palo Alto, CA US Phoenix, AZ US San Francisco, CA US San Jose, CA US Seattle, WA US Washington, DC US ACTUAL ESTIMATED PLANNED SPECIAL 40 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks

41 Provider Network UltraDNS NSONE 16 POPs North America South America Europe Asia Ashburn, VA US Sao Paulo, BR Amsterdam, NL Hong Kong, HK Chicago, IL US London, GB Singapore, SG Dallas, TX US Sydney, AU Los Angeles, CA US Tokyo, JP Miami, FL US New York, NY US Africa San Jose, CA US Cape Town, ZA Seattle, WA US ACTUAL ESTIMATED PLANNED SPECIAL 41 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks

42 Provider Network UltraDNS UltraDNS 30 POPs North America South America Europe Asia Ashburn, VA US Bogota, CO Amsterdam, NL Beijing, CN Atlanta, GA US Sao Paulo, BR Dublin, IE Hong Kong, HK Chicago, IL US Sao Paulo, BR Frankfurt, DE Mumbai, IN Dallas, TX US London, GB Singapore, SG Denver, CO US Madrid, ES Sydney, AU Los Angeles, CA US Paris, FR Taipei, TW Miami, FL US Tokyo, JP Minneapolis, MN US New York, NY US Africa Phoenix, AZ US Johannesburg, ZA San Jose, CA US Seattle, WA US Toronto, CA Vancouver, CA ACTUAL ESTIMATED PLANNED SPECIAL 42 State of the Cloud DNS Report 2014 CloudHarmony Inc. DNS Networks