Enabling DNSSEC

Scenario: You need to enable the “Domain Name System Security Extensions” for one authoritative DNS zone you previously configured (please see the “Create an authoritative DNS zone” howto).     How to configure DNSSEC: Log on to GSLB.me using your credentials From the main interface dashboard, click on the authoritative zone you want to enable DNSSEC for   The zone configuration dashboard is then displayed. By default DNSSEC is disabled: click on the “Enabled” switch button to turn it on: After turning on the “Enabled” flag, a warning is displayed to remind you that you will have to send the DS record to your registrar, in order to establish the chain… Read More

Continue Reading

Configuring and using DNS firewall

Scenario: You are running a service that is dinamically resolved through a geohost (ie. myservice.gslb.info) and you need to set up security and DNS resolution rules to: respond “NXDOMAIN” (FQDN not found) to all Internet clients running malware that try to resolve myservice.gslb.info always allow (whitelist) DNS resolution from your own public IP subnet (ie. 1.1.1.0/24). DNS resolution will take place according to the geohost configuration (to set up your geohost please refer to one of our howtos listed here below) respond with CNAME “www.google.com” to queries coming from subnet 6.5.4.0/28     How to configure it: Log on to GSLB.me using your credentials or register if you still don’t… Read More

Continue Reading