百度智能云

All Product Document

          DNS

          General Problems

          What is DNS high defense?

          DNS attack mainly includes the following means:

          1.Query flood, which exhausts destination DNS resources by sending DNS request message continuously to form a denial of service. The specific classification includes whether the source IP is random, whether the destination domain name is random, etc. 2.Response flood, which achieves the denial of service by sending DNS response message continuously. 3.udp floodv. DNS underlying protocol is UDP, and various UDP-based flood attacks harm DNS. 4.Refractive attack (reflective attack), which forges the source IP as the third party to achieve the DoS of the third party by virtue of DNS return packet. It is a means of "Using a third party for attack". 5.Amplification attack, which is a kind of refractive attack. It amplifies traffic by constructing a response message maliciously to attack the bandwidth of the third party. The request message has dozens of bytes and response message has thousands of bytes, which means that a traffic amplification coefficient above hundreds of times can be formed. 6.Cache poisoning. Each DNS has a cache, and cache poisoning means the pollution of DNS cache by malicious means to form DNS hijacking or denial of service. 7.Vulnerability attack, which achieves the invading and controlling DNS server by means of various vulnerabilities. Vulnerability is not only the DNS program itself, but also may be other "Problems" of machine or network.

          What's the price of high defense version? What's the domain name standard?

          The price of high defense version is 30,000 CNY/single domain name/year, and online purchase is not supported temporarily, please contact your exclusive sales person or submit work order for consultation.

          Single domain name is defined as a standard domain name with no limitation of domain name level, e.g.: abc.baidu.com is a domain name, and the records of 1.abc.baidu.com, 2.abc.baidu.com can be added. The price is 30,000 CNY/year.

          Is IPV6 domain name resolution supported?

          AAAA record is supported, and domain name can be resolved to IPv6 address.

          Previous
          Service Level Agreement (SLA)