go daddy dnssec support n.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
Go Daddy ® DNSSEC Support PowerPoint Presentation
Download Presentation
Go Daddy ® DNSSEC Support

Loading in 2 Seconds...

play fullscreen
1 / 7

Go Daddy ® DNSSEC Support - PowerPoint PPT Presentation


  • 121 Views
  • Uploaded on

Go Daddy ® DNSSEC Support. PRESENTED BY: Wayne Thayer, Go Daddy CTO. TUESDAY, APRIL 3, 2012. About Go Daddy. 52 million Domain Names. 10 billion N ame Server Requests Daily. 2.7 million MySQL Databases. 1 billion W eb Server R esponses D aily. 12

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'Go Daddy ® DNSSEC Support' - martha


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
go daddy dnssec support

Go Daddy® DNSSEC Support

PRESENTED BY:

Wayne Thayer, Go Daddy CTO

TUESDAY, APRIL 3, 2012

about go daddy
About Go Daddy

52 million

Domain Names

10 billion

Name Server Requests Daily

2.7 million

MySQLDatabases

1 billion

Web Server Responses Daily

12

Worldwide Data Centers(100,000 sq. ft, in use)

10 millionActive Customers(through January 2012)

1.1 million

WebSite Tonight®Accounts

5 million

Hosted Accounts

security services
Security Services
  • Go Daddy offers a full array of site protection tools, including SSL Certificates, Website Protection Site Scanner and Premium DNS.
  • SSL Certificates
  • #1 in net-new SSL Certificates (according to Netcraft®)
  • Fastest-growing SSL Certificate Authority
  • Over 600,000 active SSL Certificates
  • Go Daddy was closely tied to the development of Extended Validation Certificates
  • Website Protection Site Scanner
  • Identifies Malware and website security gaps
  • Offers recommended solutions
  • Helps prevent Google® “blacklisting”
  • Includes free expert support

SOME OF THE WORLD’S BIGGEST

COMPANIES TRUST OUR SSLs

security services cont d
Security Services cont’d

Domain Name System Security Extensions (DNSSEC)

  • Addresses identified security risks and helps prevent cache poisoning, pharming and man-in-the-middle attacks.
  • Go Daddy is 1 of only 3 registrars currently supporting DNSSEC for .com as reported by ICANN
  • Two types of DNSSEC implementation: manual and automated.
    • Manual signing - ~1000 active DNSSEC records
      • Gives user complete control over DNSSEC
      • Can self-host DNS
      • Offers custom key-rollover schedules
      • Challenge: Requires technical knowledge – user creates own keys and updates the DNS zones
    • Automated signing - ~3000 active DNSSEC records
      • We control the full spectrum, so user errors don’t enter into equation
      • Automated key rollovers with notification
      • Insulates end user from specification changes at the registries
      • Challenge: Must use prescribed nameservers
  • Manages DS records for the following domain name extensions:
    • .com
    • .net
    • .org
    • .co, .com.co, .net.co, and .nom.co
    • .me
    • .in – added last week
  • .us
  • .biz
  • .eu
  • .se
  • .co.uk, .me.uk, and .org.uk
premium dns
Premium DNS

Premium DNS accounts offer a higher level of support and advanced features, adding power, flexibility, and control to DNS management – all hosted on Go Daddy’s world-class infrastructure.

DNSSEC is easily enabled and disabled through a simple radio button in DNS Manager Web UI.

Supports domains registered at Go Daddy and elsewhere.

Zone Signing Keys (ZSK) - 1024-bit RSA with 60-day automated rollover.

Key Signing Keys (KSK) - 2048-bit RSA with 365-day automated rollover.

DNSSEC zones are automatically re-signed when changes are made to them, with no additional input from the user.

PREMIUM DNS MAKES IT EASY TO MANAGE AND SECURE DNS TO IMPROVE PERFORMANCE, ACCESSIBILITY AND SECURITY BY PLACING DNS INFORMATIONON OUR PREMIUM GLOBAL NETWORK.

dns infrastructure
DNS Infrastructure

Through Go Daddy’s global Anycastnetwork, Premium DNS offers faster, more reliable and more secure DNS resolution. Traffic is balanced across multiple Go Daddy data centers throughout the United States, Europe and Asia, eliminating a single point of failure and routing DNS activities for maximized performance.

  • Homegrown system
  • Handles 10 billion requests per day
  • Globally distributed
  • Employs IP anycastto route traffic
  • High levels of resilience at all tiers
  • Multiple types and levels of DDoS
  • protection employed