Why Managed DNS Services

Transcription

1 Why Managed DNS Services and Why Now? Jennifer M. Pigg, VP of Research, Yankee Group Rohit Kinra, Senior Manager, VeriSign June 23, 2011 Copyright Yankee Group Research, Inc. All rights reserved. Page 1

4 And the Network Mobile app downloads are skyrocketing. It took the Apple App Store just 2.2 years to reach 6 billion downloads; it took Apple s itunes five years to reach that milestone. Of course, many of those apps are free. Netflix s streaming traffic is growing. According to statistics from deep packet inspection (DPI) vendor Sandvine, streaming video content provider Netflix now accounts for percent of downstream traffic in North America during peak hours, second in traffic volume only to generic HTTP sessions. Smartphones sales are outstripping PC sales. Yankee Group forecasts that sales of smartphones will reach 475 million units in 2012, exceeding the sales of PC and notebook computers combined for the first time. Apple s ipad continues to sell like crazy. Apple released the ipad in Q and sold 3 million of the tablet computers in 80 days. By the end of 2010, the company had sold over 14.8 million ipads. Apple is targeting sales of 100 million iphones in That s double what they sold in 2010 (47.5 million), which was double what they sold in 2009 (25 million), which was double what they sold in 2008 (13.8 million) Copyright Yankee Group Research, Inc. All rights reserved. Page 4

5 DNS: The Force That Surrounds Us Is used to connect to every Web site and every e mail address box Allows us to turn this: into this: yankeegroup.com Works so well that we forget about it (until it breaks) Copyright Yankee Group Research, Inc. All rights reserved. Page 5

7 The Network Is Growing in Complexity, and DNS Is No Exception Cloud computing and virtualization IPv4 address depletion IPv6 implementation complexity DNSSec and then there s security Copyright Yankee Group Research, Inc. All rights reserved. Page 7

8 DNS: Both a Target of and a Conduit for Attack WikiLeaks The great firewall of China Twitter s DNS hijacking Cyxymu Brazil s Bradesco Bank Pakistan blocks YouTube Copyright Yankee Group Research, Inc. All rights reserved. Page 8

12 D.I.Y. OSs, including Windows, Unix and Linux, come with a DNS server IPAM solutions are available at a cost of between U.S.$15,000 and U.S.$30,000 for a large enterprise Pros Cost and control Cons Can you exert enough control? Operational costs: personnel, administration, security Scale: performance, geo reach, latency, bandwidth, availability Outage costs Copyright Yankee Group Research, Inc. All rights reserved. Page 12

13 Ask Your ISP Pros Has the potential to resolve almost all the vulnerabilities of inhouse managed DNS Cons It rarely does DNS management is not the main function of an ISP. As a result, DNS performance is likely to suffer in terms of: Bandwidth Latency Support Coverage Updates Copyright Yankee Group Research, Inc. All rights reserved. Page 13

14 Managed DNS Services Interest in managed service is driven by: DNS importance DNS vulnerability DNS and IPAM complexity Increased and increasing importance of external network Better control Cost considerations There are a lot of choices out there. What do you look for in a managed DNS service? Copyright Yankee Group Research, Inc. All rights reserved. Page 14

18 Managed DNS Services, Why Now? VERISIGN CONFIDENTIAL

19 About Verisign Founded 1995; NASDAQ: VRSN Billions of times each day, Verisign helps companies and consumers all over the world to engage in trusted communications and commerce. Two businesses: Domain Name Services and Network Intelligence + Availability Headquartered in Dulles, VA 2010 Revenues: $681M S&P 500 company 1,100 employees 19 Note: As of 9/30/10

20 What We Do Internet Infrastructure Scalable directories Interoperability Security Billions of times each day, Verisign helps companies and consumers all over the world to engage in trusted communications and commerce. Domain Name Services Domain Name Registries:.com.net.tv.cc.name.jobs International Domain Names - IDNs DNSSEC Registry Lock Service Internet Visibility - IPS Network Intelligence + Availability DDoS mitigation Verisign Internet Defense Network (VIDN) Managed DNS Security Intelligence - idefense 20

21 21 Verisign Managed DNS

22 Unmatched DNS Experience & Expertise DNS is in Verisign s DNA Verisign is the trusted provider of Internet infrastructure services for the networked world Set the standard for DNS uptime Managed.com/.net Top-Level Domains (TLDs) for over 12 years without interruption Proven DNS Expertise Managing A and J Root and.com/.net Resolution Owned and Operated Attack-Resistant, Global DNS Infrastructure Verisign manages ~100 million domain names and processes over 60 billion DNS queries daily Involved in establishing New Standards in DNS Management (DNSSEC) Verisign Enables and Protects the World s Networked Interactions 22

23 Verisign s Infrastructure Is Unique Scale/Capacity 200Gb+ of network bandwidth 4+ trillion queries/day capacity Global database updates in less than 15 seconds Operational Expertise Track record of delivering 100% SLAs 15 years of investment in the core infrastructure Tested continuity and disaster recovery abilities Unique Technology 200+ patents for internet security and infrastructure Proprietary DNS lookup technology with 100x the processing capacity Average user interacts 30+ times per day with our infrastructure 1 Our infrastructure enables $8T of online commerce 2 23 Sources: 1 Verisign; 2 IDC - Sep 2009

24 Verisign Managed DNS Global Resolution Sites Multiple, geo-distributed name servers to deliver 100% DNS resolution and network uptime over the past 12+ years 6 Unicast and 17 Anycast sites Among the first to notice DNS attacks through exclusive real-time view of DNS traffic patterns of.com/.net zones Process approximately 60+ billion DNS queries daily 4 trillion queries / day capacity Proprietary, Award-winning DNS Software for Greater Security and Speed Verisign Managed DNS reduces the cost and burden of maintaining your own external DNS infrastructure 24 Managed DNS Locations Verisign CONFIDENTIAL Verisign Managed DNS is a DNS hosting service that delivers 100% DNS resolution, improving the availability of Web-based systems

25 Verisign DNS Infrastructure Highlights Enhanced security measures Over-provisioned global infrastructure proven resistant to DNS-based DDoS attacks ATLAS Non-BIND proprietary technology platform reduces vulnerabilities associated with DNS (open-source) software Ongoing patch and vulnerability management Redundant, scalable, and modular architecture No single point of failure Each resolution site has multiple network connections Front-facing for queries/resolution and back-end for management and monitoring Intelligent traffic load balancing for DNS servers Proactive 24x7x365 network performance monitoring Direct NOC coordination with multiple upstream network providers Network designed and monitored to operate at below 20% capacity to support traffic bursting 25 VERISIGN CONFIDENTIAL

26 Verisign Managed DNS Solution Verisign Managed DNS is a cloud-based DNS hosting service that offers unmatched DNS performance and benefits over in-house management and third-party providers. Key Features Simplified DNS Management through Intuitive, Error-Checking Console Managed DNS Reporting Service Geo Location DNSSEC Failover Service Web Forwarding Web Parking Service Key Benefits Guaranteed 100% DNS resolution Reduced Cost and Complexity Improved Security of DNS Zones and Response Integrity (DNSSEC) Enhanced DNS Response Time Access to DNS Experts Quick and Efficient New Protocol Integration (IPv6) 26

27 Anycast vs Unicast DNS Routing Unicast (one-to-one) Communication between a single client and a single server Anycast (one-to-one-of-many) Communication between a single client and the topologically closest instance of a network service that is represented in multiple places by a common IP address 27

28 Verisign s Hybrid (Anycast + Unicast) Routing Approach Anycast only resolution approach implies a tradeoff between performance and availability Better served by a hybrid solution A smaller number of name servers within a zone is Anycasted, while the remaining servers are Unicasted Minimizes transactional latency while optimizing availability Provides customer with ability to determine their tolerance between performance and availability Verisign has used this approach to manage DNS resolution for.com and.net 28

29 Verisign DNS Management Portal DNS Manager is an intuitive, permissions-based tool that presents a user friendly interface for DNS management Improved Web Performance Without Sacrificing Control Bulk-add multiple domains Auto Error Checking Real-time Data Propagation DNS queries and Web Forwarding Usage Reports 29 Verisign CONFIDENTIAL

30 30 What to Look for in a Managed Service Provider

31 How does Verisign Managed DNS Stack Up? 1. Security: Proprietary, Award-winning DNS Software (ATLAS) with a proven attack-resistant Global DNS Infrastructure 2. Performance: Hybrid routing architecture minimizes DNS resolution latency, while ensuring availability 3. Change Management: Real-time Propagation for DNS Changes 4. Scalability and Latency: 17 globally distributed DNS resolution centers located at major telecommunications peering points. Verisign s network infrastructure is redundant within each facility and across facilities 5. Recoverability: Redundant, scalable, and modular architecture with no single point of failure. Verisign is among the first to notice DNS attacks through exclusive real-time view of DNS traffic patterns of.com/.net zones. Additionally, DNS infrastructure has become a prime target for DDOS attacks 31

32 How does Verisign Managed DNS Stack Up? 6. Service and support: 24X7 customer support and monitoring included at no additional charge 7. SLAs: 100% DNS Resolution Guarantee with 12+ year track record without a single service interruption 8. Internal and external DNS management: Verisign's Managed DNS portal is an intuitive, permissions-based tool that presents a user friendly interface for DNS management 9. ROI: Verisign Managed DNS reduces the cost and complexity/burden of maintaining your own external DNS infrastructure 10. Proven track record: Verisign has proven track record of DNS Expertise Managing root/.com/.net Resolution and proven Attack-Resistant Global DNS Infrastructure 32

33 ROI for External DNS Hosting Customer Profile $4-5 million in annual online sales ~100 employees Web site traffic: ~100,000 visitors per day Revenue Protection Revenue lost per hour $5000 DNS related downtime 0.3% Hours of downtime/yr 26 $130,00 Increased Productivity Sys Admin time 25% x 1 FTE 80% reduction $17,000 End User Productivity 0.3% loss due to DNS Avg. salary $85K $25,500 Total Benefit $172, Verisign CONFIDENTIAL