Sometimes DNS traffic patterns can surprise you. The DNS Insights feature of Managed DNS sifts through your DNS data to provide targeted information - giving you the power to troubleshoot and optimize your network in real-time.
Sudden spikes in DNS queries can happen for many different reasons:
Misconfigurations may be causing a feedback loop that impacts network performance
Misconfigurations may expose internal devices and data to the internet, posing a significant security risk
Rising query volume could be an early sign of a DDoS attack
Unusual DNS traffic patterns could be part of a penetration test or a bug bounty program
DNS Insights delivers relevant, targeted data to quickly identify the source of anomalous traffic. With DNS Insights you can:
Quickly identify malicious activity and remove security leakages caused by improper DNS configuration
Pinpoint causes of increased usage
Remove errors and misconfigurations in application traffic flows
DNS Insights has been effective for observing the impact of threats on our DNS. It allows us access to more data than we could see before, so it is extremely useful in that regard. As manager of the network team, saving money on bad queries helps. A lot of geolocation features are useful as well because we block certain countries, so if we see an uptick of queries from certain countries, it might be indicative of a DDoS attack or something similar.
Senior Manager Network Operations, Payment Processing Software Company
Through using DNS Insights, we’re one step closer to gaining clarity around “no error” and “no fail” instances for security purposes. We intend to use a product like this to discern if query spikes are potentially security threats, as being proactive about bug bounty and penetration testers remains top of mind for us. We could see RDR and threat-hunting teams having an interest in this product, as well.
Engineer Global Technology Services, Media Conglomerate
DNS Insights allows us to drill down on traffic specifics as it relates to geolocation of queries... this feature helps us get closer to better, clearer data. For us, the portion of DNS Insights which has even higher utility is the ECS geolocation feature, which shows the client address embedded in the DNS request.
Manager Enterprise IP Subnet, Fortune 100 Industrial Company
That random spike in traffic? Don't just assume it's a DDoS attack - our customers using DNS Insights have discovered root causes as mundane as misconfiguration issues, and as unusual as a college class experiment
The DNS Insights data feed is natively compatible with Prometheus and any system that supports Prometheus Remote Write (including Splunk and DataDog).
DNS Insights supports integrations with a wide variety of other data sinks through OpenTelemetry.
DNS Insights comes with pre-built Grafana dashboard templates.
Looking for help? Please email [email protected]
