An elastic and resiliency defense against DDoS attacks on the critical DNS authoritative infrastructure.

The critical DNS authoritative infrastructure is increasingly targeted by DDoS attacks in recent years. This paper proposes a novel mitigating solution to DDoS attacks on DNS authoritative name servers. The solution uses DNAME record to signal domain redirection directive to recursive resolvers, which then accordingly redirect their subsequent query traffic to the redirection domains. In response to DDoS attacks, multiple domains can be chained to elastically and adaptively provision and release authoritative resources to scale rapidly on demand. The simulation results validate the efficacy of the solution.