General FAQs

What is DNS advanced defense?

DNS attacks mainly include the following methods:

1. Query flood: Overwhelm the target DNS resources by continuously sending DNS request messages, leading to a denial of service. This can be categorized further based on whether the source IP and target domain name are random.
2. Response flood: Cause denial of service by repeatedly sending DNS response messages.
3. UDP flood: Since DNS primarily utilizes the UDP protocol, various UDP-based flooding attacks can significantly affect DNS operations.
4. Reflection attack: By forging the source IP as a third party, attackers use DNS response packets to launch a DoS attack on the third party, employing a "borrowed knife to do harm" strategy.
5. Amplification attack: A specific type of reflection attack that maliciously crafts response messages to increase traffic volume, thereby enabling bandwidth attacks against third parties. A request of mere tens of bytes can prompt responses of thousands of bytes, leading to a traffic amplification factor that exceeds 100 times.
6. Cache poisoning: A method that manipulates the DNS cache through malicious means, resulting in DNS hijacking or denial-of-service attacks.
7. Vulnerability attack: Exploiting various vulnerabilities to compromise and control DNS servers. These vulnerabilities may reside not only in the DNS program itself but also in the underlying machine or network infrastructure.

Does it support IPv6 domain name resolution?

Supported. You can configure an AAAA record in the resolution settings to map the domain name to an IPv6 address. Additionally, the Intelligent Cloud DNS server cluster fully supports IPv6.

How to set up reverse resolution?

Reverse resolution is the mapping from an IP address to a domain name. It obtains the domain name pointed to by the IP address by querying the PTR record of the IP address, which is relative to forward resolution that maps a domain name to an IP address. Reverse resolution is not directly related to DNS vendors. To apply for adding reverse resolution, you need to apply to the ISP that provides broadband access services. If you use Baidu AI Cloud's EIP, you can submit a ticket and Baidu AI Cloud after-sales will assist you in adding reverse resolution.