

The digital era demands a new generation of DNS resolution systems
Modern enterprise networks are rapidly evolving toward intelligence, automation, and IPv6 adoption.
How can recursive DNS systems meet the requirements for multi-link routing, application-level scheduling, and automated failover?
Three Major Advantages

High-Scale Resolution Capacity
Powering over one million intelligent routing policies with big-data analytics to provide comprehensive real-time visibility into global resolution performance.

Intelligent Traffic Scheduling
Our network manages ten thousand connected devices, performing one hundred million resolutions every minute while supporting one thousand transactions.

Significantly More Reliable
Our intelligent resolution algorithms boost business continuity by tenfold while providing comprehensive technical support across sixty diverse global regions.
Advanced Recursive Resolution Capabilities
Optimized record selection based on applications and source IPs
TTL control for specific domains to prevent excessively long cache retention
Prefetch key business domains to ensure low-latency, stable resolution using link-level health monitoring and automatic failover
Link Health Monitoring & Automatic Failover
Real-time monitoring of upstream forwarding server health with automated fault isolation
Automatic failover to a standby recursive source when the outbound link fails
Upon query failure, automatically retry via a standby forwarder or perform a local recursive lookup
Multi-Exit Traffic Steering
Coordinated steering across multiple network egress links based on real-time traffic and bandwidth, with dynamic adjustment of resolution weights.
Fine-grained scheduling using domain-level policies to optimize application-level resolution
Time-based differentiated strategies to balance link utilization and user experience
Dual-Stack Resolution Optimization
Comprehensive dual-stack resolution policies to meet optimization needs in complex network scenarios.
AAAA record filtering with blacklist/whitelist control
AAAA wildcard matching
Fine-grained DNS64 capabilities, including prefix, suffix, and mapping control
Recursive Resolution Control
Multiple forwarding modes, including RTT-based optimization and sequential forwarding
Source-based access control
Destination-based access control
Dynamic Threat Detection, Safeguarding
Business Security
Domain Name System Protocol Security
- 0x20, identifier/port randomization
- DoT/DoH
- DNSSEC
- Non-standard protocol filtering
Domain Name System Security Capabilities
- Protection against local security policy reflextion and amplification attacks
- Protection against domain - name/zone rate - limiting cache snooping attacks
- Protection against IP rate - limiting tunnel attacks
- Servfail protection
Interception logs
- Local interception, cloud - based intelligence synchronization & policy distribution
- Interception statistics
- Interception alert
- Interception log
Flexible Deployment, Multi-Scenario Support

Explore Our Solutions
Explore more ZDNS solutions to secure your network foundation, enhance digital operations, and make your infrastructure smarter.






