"Latency on the best VSAT is 600ms, which made Google DNS a bad choice. DNSBOX has made our internet service as fast as it can be."
Mohammed Nori, MSTT, Libya
"Making host files is much simpler than before, quicker and less error prone."
Mike Neverdusky, CDE Lightband, USA
"The DNSBOXes meet all of our expectations. It is very rare when a product actually performs as stated in the marketing literature..."
Randy Haynes, Senior Network Engineer, EDS, USA
"I like the small physical size of DNSBOX, its flashed based disk architecture, and easy to use admin interface..."
Randy Haynes, Senior Network Engineer, EDS, USA
"DNSBOX’s simple user interface makes it much easier to train entry-level engineers to carry out tasks like creating, updating and editing zone records."
Samson Oduor, Access Kenya, Kenya

Protect Against Cache Poisoning with DNSSEC

Many organisations want to introduce DNSSEC to protect against cache poisoning which can result in your users being misdirected to malicious websites and/or disrupt services that rely on DNS such as email and VOIP.

But implementing and managing DNSSEC can be complicated, costly and time-consuming:

  • All your zones need to be signed for DNSSEC to be effective – a big task for large networks
  • DNSSEC keys need to be stored securely so that they cannot be changed maliciously
  • Keys also need to be periodically updated – known as ‘key rollover’.
  • Additional DNSSEC steps in DNS resolution may introduce unwanted latency

Key rollover is particularly complex and requires very careful administration. If you get it wrong, keys which are no longer valid remain cached in other DNS servers around the world or are not synchronised with your own upstream servers. In such cases, clients using DNSSEC would be unable to resolve your records. With lots to know and manage, manual key rollover is incredibly error-prone.

DNSSEC-Screenshot-smYou need a solution that, like DNSBOX:

  • Automates DNSSEC key management and rollover
  • Automates zone signing for rapid implementation
  • Makes it easy to store DNSSEC keys securely
  • Uses a high performance resolver to mitigate the extra latency of DNSSEC requests

Next: Microsoft Integration >

Because DNSBOX is versatile and scalable, our customers around the world come in all shapes and sizes. ISPs, enterprises, government agencies and even internet registers simplify, control and protect their DDI services with DNSBOX.

How can we make your visit easier?


Give us a few details about your requirement and we'll make your life easier by serving the most relevant information.
I work in a...
I prefer to read...
GO