Exclusive Summer Deal | - 40% OFF for SSL Certificates | Time left:

What is DNSSEC?

DNSSEC is a feature of the Domain Name System (DNS) that authenticates responses to domain name lookups. It prevents attackers from manipulating or poisoning the responses to DNS requests. DNS technology was not designed with security in mind. One example of an attack on DNS infrastructure is DNS spoofing. In which case an attacker hijacks a DNS resolver’s cache, causing users who visit a website to receive an incorrect IP address and view the attacker’s malicious site instead of the one they intended.

Pricing

DNSSEC management services are part of our DNS hosting plans - Premium DNS, DDoS Protected DNS, and GeoDNS. No extra costs for better security!

Premium S
$2.95/月 		Premium M
$4.95/月 		Premium L
$14.95/月
? Managed Anycast DNS with DNSSEC:
? DNS域: 5 50 400
? DNS記錄: 200 2,000 20,000
? DNS queries per month: i 5M i 150M i 500M
? 郵件轉發: 10 100 1,000
? DNS Failover checks: 1 2 3
Completely free trial. No credit cards required. No tricks.
Start Free 30-day Trial
Start Free 7-day Trial
Buy Now
Premium S
$2.95/月
  • +4 Anycast DNS servers
  • 5 DNS域
  • 200 DNS記錄
  • 5M DNS queries per month
  • 1 DNS Failover check
  • 10 郵件轉發
  • DNSSEC
  • Extended Features
Completely free trial. No credit cards required. No tricks.
DDoS Protected S
$5.95/月
  • +4 Anycast DNS servers
  • DDoS protection for DNS
  • 5 DNS域
  • 200 DNS記錄
  • 5M DNS queries per month
  • 1 DNS Failover check
  • 10 郵件轉發
  • DNSSEC
  • Extended Features
Completely free trial. No credit cards required. No tricks.
GeoDNS Start
$9.95/月
  • 4 Anycast DNS servers
  • DDoS protection for DNS
  • DNS direction by geolocation
  • 1 DNS域
  • 1,000 DNS記錄
  • 100M DNS queries per month
  • 1 DNS Failover check
  • 3 郵件轉發
  • DNSSEC
  • Extended Features
Completely free trial. No credit cards required. No tricks.
免費區域遷移
輕鬆即時升級
No credit cards required
24/7 Live chat support

How does DNSSEC work?

當您啟用 DNSSEC 時，我們會為您的區域產生一組公私鑰。公開金鑰會以 DS 或 DNSKEY 記錄提供，並應在您的網域供應商處設定。我們的網路會在區域部署期間使用私密金鑰簽署您的記錄。終端使用者 resolver 會根據公開金鑰檢查這些簽章，以驗證傳輸期間的記錄完整性。

DNSSEC 旨在使用者輸入網域名稱後，透過驗證數位簽章來提升使用者安全。只有當資料與 Primary DNS 伺服器之間的數位簽章相符時，資訊才能到達使用者裝置，確保連線到合法網站。它利用數位簽章與公開金鑰驗證資訊，並在現有 DNS 項目如 A、CNAME 和 MX 中加入新記錄。DNSKEY 和 RRSIG 使用公開金鑰密碼學對 DNS 資料進行數位簽署。每個 DNS 區域的 name server 都持有公開與私密金鑰。當使用者查詢時，伺服器會提供以私密金鑰簽署的資訊，接收方則以公開金鑰開啟。若資訊被修改，將無法正確開啟並觸發錯誤訊息。

Benefits & Features

Easy Setup

Just click the activation button in the control panel, and our system will secure the zone. You will be required only to add the DS records at the provider, and the setup will be completed.

Security

We are using the Elliptical Curve Algorithm (ECDSA P-256) for all signatures, which is stronger and smaller than the standard RSA keys.

Performance

Keeping DNS answers as small as possible means faster speed for you! Additionally, our Anycast DNS Network provides more rapid responses from the closest location to the resolver.

24/7 Support

No matter what day, no matter when, we provide continuous, uninterrupted network monitoring and support. Our Technical Support team is online for you 24/7 by live chat and tickets. We can migrate your zones for free, read more here.

How to configure DNSSEC in ClouDNS?

To activate DNSSEC signing and obtain the domain DS records and DNSKEY records, you need to process the following steps:

  1. Log into your ClouDNS control panel.
  2. Navigate to the zone you wish to configure.
  3. Locate the "DNSSEC" menu at the top of the zone's control panel and click on it.
  4. From here, choose to either activate or deactivate DNSSEC zone signing.

Optional: For additional details and guidance about DNSSEC implementation, refer to the ClouDNS DNSSEC wiki page.

Why should I care about DNSSEC?

When you want to connect to a particular website, your browser should get the corresponding IP address. Unfortunately, there is a chance an attacker to intercept your DNS queries and place fake information. As a result, your browser will connect to a forged website where you could potentially enter personal information, like bank details.

Thanks to DNSSEC, there is an additional level of security, and your browser is able to check if the DNS data is actually correct and not changed. In addition, DNSSEC is used not only for the web but also by any other Internet service or protocol, for instance, SMTP and Voice-over- IP (VoIP).

透過 DNSSEC，您可以保護網域免受以下弱點影響:

已啟用 DNSSEC 與非 DNSSEC 網域

已啟用 DNSSEC 的網域提供密碼學安全性，確保 DNS 資料真實，並保護使用者免於攻擊與流量攔截。它們可保護品牌免於 DNS hijacking 與聲譽損害。相較之下，未使用 DNSSEC 的網域缺乏此保護，更容易遭受攻擊，讓使用者與品牌都面臨風險。

功能 已啟用 DNSSEC 的網域 非 DNSSEC 網域
Security 以密碼學方式保護 容易遭受 DNS 攻擊
信任 經驗證且真實的 DNS 資料 未經驗證，容易遭 spoofing
使用者安全 確保流量完整性 流量遭攔截的風險
品牌保護 受到保護，免於 DNS hijacking 容易造成聲譽受損

什麼是 DNSSEC 驗證？

DNSSEC validation is a simple process that includes the following steps:

若要取得更多深入資訊，請閱讀我們關於 DNSSEC 的完整部落格文章。

誰可以受益於 DNSSEC？

DNSSEC 可讓任何具有線上存在的人受益，從大型企業到個人網站擁有者皆然。它有助於防範 DNS spoofing 和 cache poisoning 等網路威脅，因此對仰賴安全通訊的企業至關重要，例如電子商務網站、金融機構、政府機關和醫療服務提供者。即使是小型企業與個人網站，也能使用 DNSSEC 保護資料與聲譽。透過保護網域資訊，DNSSEC 確保使用者能信任網站的完整性與真實性，為所有人提供更安全、更可靠的線上體驗。

Frequently Asked Questions

FAQ

  • 如何開始使用 DNSSEC？ - 若要開始使用，請選擇最符合您需求的方案，並點擊所選方案下方的橘色按鈕。
  • DNSSEC 可防範什麼？ - DNSSEC 可防範偽造 DNS 資料，例如來自 DNS cache poisoning 的資料。它確保 resolver 接收真實回應，降低接受錯誤資料的風險。透過驗證 DNS 回應，它可防止惡意回應對個別使用者或整個網路造成潛在影響。
  • DNSSEC 使用哪些類型的 DNS 記錄？ - DNSSEC 使用 DNSKEY、RRSIG、NSEC 和 DS 記錄。DNSKEY 儲存公開金鑰，RRSIG 包含數位簽章，NSEC 提供不存在證明，而 DS 建立信任鏈。
  • 對 DNSSEC 還有疑問嗎？ - You can contact us via our 24/7 Live chat support or if you prefer, you can send a message on support@cloudns.net.

DNSSEC is available in all of our Premium DNS, DDoS Protected DNS and GeoDNS plans!

GET OFFER

What our clients say

    "DNS Ninjas。真人服務。真正支援。 如果你正在尋找一家 DNS 供應商，會像真人而不是 ticket-bot 一樣跟你溝通，ClouDNS 就是真材實料。"

    Bandit
    來源: Trustpilot

    "Your customer service is at the top of my list, keep up the good work!"

    Sami Sälö
    Chairman of the Board @ Salskea Oy

    "ClouDNS provides the best in class DNS services. Prior to ClouDNS we were hosting and managing our DNS servers which was not core to our business so when we compared alternatives ClouDNS was the right fit..."

    James Aker
    President at Explait @ EXPLAIT, LLC

    "Thank you for the opportunity to pay for services in Bitcoins. It is very important for your customers from Ukraine at a time when the banking system of Ukraine is now destroyed."

    Mikhail Chutowski

    "I have been using ClouDNS since 2014, and I have to say they are a truly amazing. The service they have provided to me and my clients has been second to none. They offer really good value services especially the DDoS subscriptions...

    Daniel Ives
    CEO @ Ives Network t/a Daniel Ives

    "10 年來我沒有遇過任何問題，而且支援服務速度驚人！"

    JORGE B
    來源: Trustpilot

    "我向他們的 live chat 支援反映一個正在運作的 phishing 網站，他們 5 分鐘內就將其下架！他們重視安全與網路聲譽。"

    Brad B.
    來源: Trustpilot

    "Got frustrated with the lack of knowledgeable support at GoDaddy, searched for alternate DNS providers and found ClouDNS. Could. Not. Be. Happier..."

    Phillip McMahon

    "知識豐富且友善 他們的技術支援總是友善且知識豐富。我從未遇過任何 downtime 問題。"

    Boe VPN
    來源: Trustpilot

    "客戶服務始終非常出色！ 我是這家公司的新客戶，真不敢相信你們受到的待遇這麼好。很難找到像這樣出色的公司，提供如此優質的服務和產品。"

    Mel
    來源: Trustpilot

    "Working with the team at ClouDNS has been very supportive. My experience has been excellent. The team is attentive, knowledgeable and skilled when it comes to Cloud DNS, and I can recommend their professionalism."

    J. May
    Marketing Chief @ Amaze Communication

    "Outstanding Service. I'm using ClouDNS since 2015 for personal domains. In 2018 moved the domains of the company were i work and we use your services since then. Would never though to go back!!!..."

    Stanislav Filavtev

    "我使用 ClouDNS 已超過一年，對他們的服務非常滿意。從一開始，他們的平台就很友善且直覺，讓註冊與管理網域的流程簡單又省心。"

    Răzvan Birișan
    來源: Trustpilot

    "As a web agency we offer our clients shared hosting and we want to guarantee them that even if our server experiences any issues, their detached services would be kept running. That is why I turned to ClouDNS...

    Grigor Yosifov
    CEO @ Forci Web Consulting Ltd

    "每次服務都迅速有效！非常回應迅速且可靠的公司！謝謝！！！"

    Salomé Barao
    來源: Trustpilot

    "我過去十年一直使用 ClouDNS，從未遇過任何問題。我只會登入調整 DNS 設定或續約我的網域，而且一直都非常簡單。"

    Todor Tsankov
    來源: Trustpilot

    "ClouDNS is amazing I've been using for a while now and it just works great. I want to say thank you for your fantastic solution for DNS services."

    Helinton Dias
    @ CloudExperts Consultoria

    "Thank you guys for all the good work!

    I've been using the free version of your DNS service for about 4 years and there has been zero downtime...

    Iskren Slavov
    Founder/Full Stack Developer @ Wish Development Ltd

    "即使在試用期間和免費服務中，他們的客戶服務也是頂級的。我使用過其他 premium 服務，但很少能與 ClouDNS 的品質相比。 "

    Shouvik Pal
    來源: Trustpilot

    "I am so very happy with your company. You are truly the BEST DNS provider on the Internet. Your customer support, pricing, and features are top notch."

    Christopher Nofal
    Manager @ DreamLab LLC

    "支援很棒、服務優秀，價格也最划算。"

    Dion Vogliqi
    來源: Trustpilot

    "GeoDNS Start 方案上的最佳 DNS 代管，顯著加速並提高了資源可用性"

    Molepool.
    來源: Trustpilot

Trustpilot 評分 4.7/5 星，依據超過 130 reviews

Trusted by:

Online - Live Chat
我們重視您的隱私！ 我們使用 Cookies 來提升您的瀏覽體驗並分析流量。點擊 "全部接受" 即表示您同意我們使用 Cookies。 Cookie 政策。