Authoritative DNS Firewall Platform

Protect DNS Infrastructure at Carrier-Grade Scale.

DNS Firewall is a high-performance authoritative DNS defense system engineered for modern threat landscapes. It combines kernel-level traffic interception, protocol intelligence, adaptive flow control, and analytics-driven management in one stack.

Core Capabilities

Kernel-Speed Protection

eBPF + XDP filtering blocks malicious IP traffic, malformed packets, and known abusive patterns before user-space overhead.

DNS Protocol Intelligence

Built-in anomaly and malformed request detection covers random domains, invalid structures, and protocol-level abuse vectors.

Per-Domain Rate Control

Self-developed bucket algorithm applies fair throttling per domain, reducing collateral drops while preserving availability.

Upstream Resilience

Supports one-to-many authoritative upstreams with health checks, weighted balancing, and concurrent forwarding.

Streaming Threat Analytics

Real-time behavioral features and anomaly scoring identify attack patterns from query entropy, NXDOMAIN ratio, and source distribution.

Visual Operations Console

HTML5-based dashboard and RESTful backend APIs provide live QPS, resource metrics, event traces, and policy controls.

Four-Layer Architecture

The platform follows a front-back separation model with multi-layer defense, intelligent scheduling, and visualized operations. This design aligns with major DNS and security standards while remaining practical for local deployment.

  • Frontline firewall for high-concurrency packet handling
  • Backend analytics for real-time and unsupervised anomaly detection
  • Client and device management for policy and billing workflows
  • Operations modules for optimization, telemetry, and alerting

Technology Stack

NetworkeBPF, XDP, Async Event Loops
DNS DefenseAnomaly Detection, Malformed Validation, Domain Throttling
Data & AIStreaming Features, LSTM-AE / TCN / kNN Pipelines
ManagementRESTful APIs, Multi-node Controls, Visual Monitoring

Global Partnership Program

We are recruiting country-level technical and commercial partners. Visit the partner directory to view current representatives and contact channels.

View Country Partners