Forum Discussion
Protecting Azure Public DNS
Hello all, a customer of mine is using a 3rd party provider for hosting DNS records and is exploring to move to Azure Public DNS. It is a high value, high traffic system and the customer is very particular about security.
Per the last note (screenshot below) in https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-reference-architectures#ddos-ip-protection-hub-and-spoke-network, DDOS protection is already included for Azure Public DNS. Do you recommend any other protection for hosting the DNS Zones in Azure Public DNS? What best practices did you follow for high value DNS Zones like this?
Thank you,
Ravi
1 Reply
There is different tiers of offers on Azure DDoS [refer to below], btw, we may need to know what kind of DNS security needed as well:
https://azure.microsoft.com/en-us/pricing/details/ddos-protection/#pricing
