"We rolled out 1200 Chromebooks to classrooms and CACHEBOX means that we haven't needed to increase our bandwidth."
Rodney Leer, Brenham Independent School District, USA
"ApplianSys is the only vendor that takes the time to look at our appliances for us, and it really goes a long way."
Mike Caruso, Orland Park Consolidated High School District 230, USA
"Our bandwidth problems have been practically eliminated. Monitoring & customization is a snap with the web interface."
Desert Academy, Santa Fe, USA
"The DNSBOX solution gives us great performance with less power consumption! It's great and it's affordable!"
Samson Oduor, Senior Systems Engineer, Access Kenya, Kenya
"CACHEBOX made things much easier and it's great with software updates."
Dana Lehman, System Administrator, Highland Local Schools, USA

Creolink Communications

About Creolink Communications 

Creolink Communications is the leading telecommunications services provider in Cameroon. It has a 14 year pedigree in providing high-speed internet access and telephony connectivity across multiple remote sites, to a commercial and residential customer base.

Providing better user experience through reliable DNS services

When CreoLink first contacted ApplianSys in 2008, it had 500 IP addresses and was serving 600 residential and corporate customers. At the time, Network Manager at CreoLink, Daniel Kemayou, deployed a DNSBOX300 master and 2 DNSBOX100 slaves for handling DNS.

Business expansion – a shift in requirements

Now, CreoLink delivers telecommunication services to more than 10,000 customers and has widened the scope of its offering to include Top-Level-Domain (TLD) hosting.  This has prompted a revision of its DNS requirements – with security a top priority, especially for domain hosting services.

Most TLDs support DNSSEC – a security extension of the DNS protocol that digitally signs DNS records with a set of encrypted keys, making them harder to fake and protecting against cache poisoning.

DNSBOX Sales Executive Ross Horn explains: “For effective cache poisoning protection, everyone in the ‘chain’ of a DNS request must sign their records, including hosting service providers like CreoLink. But managing encryption keys manually is error-prone and a single mistake in the “key rollover” could cripple CreoLink’s ability to resolve records for its customers.”

CreoLink needed a solution that would handle DNSSEC automatically.

Preparing for continued network growth – Ipv6

Another concern for CreoLink was IP addresses management (IPAM): with more subscribers using IPv6 devices, the service provider needed visibility of IP addresses to plan growth efficiently. This involves:

  • Managing IP addresses and allocating them to different subnets and domains;
  • Planning IP address allocation for future growth: assigning blocks to specific domains, keeping others free and having a system to handle both IPv4 and IPv6 client devices.

Outsourcing these services was not an option because Creolink wouldn’t be able to guarantee security, nor have direct control over when and how changes were made on an external IPAM system.

Pleased with the existing DNSBOX solution, Daniel contacted his ApplianSys Account Manager, Ross Horn, to discuss upgrade options.

“It was clear that Creolink’s new requirements would easily be met by a simple upgrade to DNSBOX’s fully integrated DDI management solution.  One of the key benefits of the DNSBOX solution is its flexibility in fitting specific requirements and the ease with which it can be scaled – very affordably – as these requirements grow in complexity and/or size,” says DNSBOX Sales Executive, Ross Horn.

Following this, the ISP deployed two DNSBOX200 slaves in different cities, remotely managed by a DNSBOX400 master.

The solution makes it easy to store DNSSEC keys securely, providing automated zone signing and key management. It also comes with a feature rich, well documented XML-RPC Application Programming Interface (API). CreoLink can use this to create new bespoke applications, such as one to allow creating domain names directly from the provider’s website.

“The IPAM module makes it very easy to get full visibility of their IP space and effectively plan for and allocate IP addresses to various clients – and it’s all done centrally,” says Ross.

RESULTS

DNSBOX has proven to be a reliable and robust solution: Creolink has used it to support its DNS services for over seven years.

As its requirements have grown, the ISP has been able to extend the solution to facilitate business expansion with modest incremental investment: “Creolink are happy with their DNSBOX solution because at each point in time, they’ve just had to pay for what they needed, without limiting future options,” says Ross.

 

PDF-icon-sm Download Creolink Communication’s case study (pdf, 625k)