The Domain Name System (DNS) is the lifeblood of a website. If there is life in the DNS, your site is up and running effectively. However, if there are any issues with the DNS, the website will suffer. Because of the devastating effect viruses and malware have upon domains, a keen eye on DNS security is needed. Security and performance of DNS can be done in a few simple steps.
Step 1. Check for DNS Redundancy and High Availability
The first thing you should do when focusing on DNS security and performance checks is to see at least two internal DNS servers. The best domain and web hosting services will have a primary and a secondary DNS server. By having a redundant, high availability is obtained. The replication from your first to your second server will keep things synced and performing at optimal levels.
Step 2. Keep it secret, keep it safe
The primary DNS should not be given out to anyone. There is no need to share this information as the secondary DNS will kick in if there are any issues with the primary. The primary DNS server should be hidden to maximize security. Additionally, responses should focus on the respective zones of the DNS server, meaning that IT personnel should only have access to server information about the area from which the query originated.
Step 3. Log your DNS inquires and debugs
Logging is the most effective way to know who and how information is being accessed regarding your DNS servers. Usually, debug logs will inform you of any DNS queries and updates. Should you find information outside of the information listed in the debug and queries, you should flag such as a potential hazard. By default, the top-rated web hosting services will log turned on. However, you should double-check the security settings of your DNS server.
The advantage of DNS logs is that the tracking lowers the chance of cache poisoning. As the data is stored in the cache and the IP addresses are recorded, it is less prone to having malicious attacks than other online sectors—couple logging with cached data clearing to increase the security of your site even more.
Step 4. Lock your Cache
Cache has a set timeline for when and how the cache can be accessed. By default, most DNS settings are placed at 70%. In terms of security, this is a damaging default as it gives hackers and malicious attacks a 30% window in which to engage the DNS. Setting the lock at 100% ensures that the information cannot be accessed until the time to live (TTL) expires. Again, it is essential that you clear cache regularly to further minimize the accessibility to data. Check with your domain and web hosting services to determine if there is an automatic cleaning of data and the time frame (usually 30-60 days).
Step 5. Block Malicious Domain Requests
Most people would not engage with a person who looks shady. Why would you want to associate with a site which maybe? Blocking malicious flagged sites is probably the best way to boost the security and performance of your DNS. Set your filters to block any website which cannot be validated. In this way, when a client has a query from an outside source, the source cannot get through to sensitive information. The DNS filter will stop any communication between the malicious attempt and the DNS server.
Step 6. Use a creditable server
Not all shared hosting sites are created equal, and you should perform due diligence to ensure that when choosing a domain and hosting web service, the DNS Servers are safe and perform well. The top-rated web hosting sites will have information about how information is handled. Ensure that you read and engage all the DNS safety features available for your site. Should you have any questions about your DNS server security, contact your domain and web hosting services administrator before going live.
Step 7. Keep a watchful eye out for suspicious activity
Periodically, check your logs and queries. While there may not appear to be any malicious activity, the number of queries should be considered. A high number of queries may result from a hacker or malicious program re-attempting access to the DNS server. Check IP addresses to see if you have queries from the same address but under a different name.
Step 8. Flag non-domestic inquiries
Regardless of where you reside, the odds of having multiple inquiries from multiple non-domestic IP addresses are slim. Whenever you see multiple inquiries from outside your domestic area, flag these as potential threats, contact your register administrator immediately if you have concerns about any IP address.
