Skip to content

SafeDNS: Ensuring Robust Security and Stability for DNS Resolvers

SafeDNS uses an efficient Anycast network for its DNS resolvers to deliver responsive and reliable user responses across the globe. With the ever-growing size of the Internet and increasing need for rapid and secure data exchange, DNS resolvers such as SafeDNS are key elements in preserving integrity and speed of connections to access the global network. SafeDNS also addresses challenges related to DNS attacks and DNS cache manipulation, ensuring robust protection and efficient operation.

Here’s how SafeDNS safeguards its DNS servers and ensures a high level of performance and security:

Anycast Network

Anycast

Highest Efficiency Possible. The efficiency of SafeDNS fundamentally depends on its Anycast network. An anycast network is a routing technique which uses a type of network address where the requests for the network are distributed among a number of nodes. Under this architecture, incoming requests are automatically routed to the nearest or best-connected node.

Client Distribution Among Nodes

Anycast clients’ requests are distributed among different location nodes in various ways. The distribution depends on multiple conditions such as client location, client provider, upstream provider of a given node, and more. This significantly lowers the possibility of a DDoS attack on a single node, enabling the system to redistribute the load and minimize the risk of being overloaded.

Guardian Service

Spam Detection and Protection

Every node has its own proprietary Guardian service which protects against spam of DNS queries. Guardian communicates with DNS proxy on nodes and parses IP addresses to check whether they belong to SafeDNS clients.

Request Scoring

The number of requests coming from each IP address is tracked and checked against botnets and other types of spammy categories. Depending on that, IP addresses get corresponding scores.

Suspicious IP Blocking

When the score surpasses a certain level, the IP address is blocked on all nodes in the network. In the situation of a DNS DDoS attack, if an IP address is detected and blocked on a certain node, then the further use of the device with the same IP address is impossible.

Response Time

The average time of Guardian to illegitimate DNS traffic is one minute, which allows for illegitimate threats neutralization and stability and security of the whole DNS infrastructure.

As one of the top 10 DNS resolvers globally, SafeDNS utilizes TIER IV nodes distributed worldwide. These nodes are strategically placed to provide optimal coverage and performance. The use of TIER IV nodes, which represent the highest standard in data center and server infrastructure, ensures that SafeDNS can offer unparalleled reliability and uptime. These nodes are part of a carefully designed network configuration that enhances the security and efficiency of DNS operations.

 

According to a recent study, SafeDNS not only ensures fast and reliable DNS resolution but also maintains a sustainable web filtering infrastructure. This commitment to stability and security makes SafeDNS a preferred choice for users worldwide seeking dependable DNS resolution services.

Provider Measures for Server Protection

Traffic Analysis and Filtering

  • Behavioral Traffic Analysis: SafeDNS uses machine learning and behavior analysis technologies to identify and block abnormal DNS traffic. By continuously monitoring traffic patterns and behaviors, the system can quickly detect and mitigate potential threats.
  • IP Address Filtering: Suspicious IP addresses or subnets from which dubious DNS traffic originates are blocked. This proactive approach prevents malicious actors from gaining a foothold within the DNS infrastructure.

Early Warning Systems

SafeDNS utilizes global monitoring networks and sensors to detect early signs of DDoS attacks. These early warning systems enable swift response and mitigation, ensuring that threats are addressed before they can cause significant damage.

Automatic Scaling

Cloud technologies enable SafeDNS to automatically scale resources, such as computing power and bandwidth, to handle sudden DNS traffic spikes. This scalability ensures that the DNS infrastructure remains resilient and responsive, even during periods of high demand.

Bandwidth Control

By limiting bandwidth for specific types of DNS traffic or users, SafeDNS can prevent network overload. This targeted approach ensures that legitimate DNS traffic flows smoothly while malicious or excessive traffic is curtailed.

Redundancy and Failover Systems

SafeDNS constructs its DNS infrastructure with redundancy and failover capabilities, which means that in case of an attack or hardware failure, the DNS traffic can be swiftly redirected to other nodes or data centers. This redundancy ensures that the network continues to operate smoothly, minimizing any disruptions for users.

Partnership with DDoS Protection Providers

To strengthen its defenses, SafeDNS teams up with top DDoS protection providers like Akamai, Cloudflare, and Arbor Networks. These partnerships add extra layers of security and expertise, making SafeDNS even more capable of defending against sophisticated and large-scale attacks.

Overall, SafeDNS is a solid choice for DNS resolution services, thanks to the robust security measures and efficient Anycast network. With advanced threat detection and mitigation strategies in place, you can trust SafeDNS to deliver high performance and strong protection against potential cyber threats.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About SafeDNS
SafeDNS breathes to make the internet safer for people all over the world with solutions ranging from AI & ML-powered web filtering, cybersecurity to threat intelligence. Moreover, we strive to create the next generation of safer and more affordable web filtering products. Endlessly working to improve our users’ online protection, SafeDNS has also launched an innovative system powered by continuous machine learning and user behavior analytics to detect botnets and malicious websites.

How to find Uniview NVR301-04S2-P4 devices

Latest Uniview NVR301-04S2-P4 vulnerability 

Uniview has disclosed a vulnerability in their NVR301-04S2-P4 product.

CVE-2024-3850 is rated medium with CVSS score of 5.4 and allows an attacker to send a user a URL that if clicked on could execute malicious JavaScript in their browser.

What is the impact?

The affected product is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability also requires authentication before it can be exploited, so the scope and severity is limited. Also, even if JavaScript is executed, no additional benefits are obtained.

Are updates or workarounds available?

Uniview encourages users to obtain the fixed version, Uniview NVR-B3801.20.17.240507, and update. You may contact your local dealer, Uniview Service Hotline, or regional technical support for assistance.

How do I find potentially vulnerable systems with runZero?

From the Asset Inventory, use the following query to locate systems running potentially vulnerable software:

product:”NVR3%”

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.