Weitere ähnliche Inhalte Ähnlich wie Building Resilient Applications with Cloudflare DNS (20) Kürzlich hochgeladen (20) Building Resilient Applications with Cloudflare DNS2. Confidential. Copyright © Cloudflare, Inc.Confidential. Copyright © Cloudflare, Inc.
2
● Cloudflare overview
● Let’s talk about DNS
● Cloudflare Managed DNS
● Customer stories
● Demo
● Q&A
Agenda
4. The Internet is critical
for your business.
Confidential. Copyright © Cloudflare, Inc.
5. There are imperatives for business applications and employees
Confidential. Copyright © Cloudflare, Inc.
Provide the essential
infrastructure for business-critical
applications and networks.
Enable a secure and agile
workforce that is increasingly
working from remote locations.
6. Today’s Internet requires
PERFORMANCESECURITY RELIABILITY
● Mitigate DDoS attacks
● Prevent customer data breaches
● Stop malicious bot abuse
● Accelerate Internet applications
● Optimize content delivery
● Ensure application availability
● Improve DNS resolution time
Confidential. Copyright © Cloudflare, Inc.
7. “Band-Aid” network boxes were built for a world of
on-premise infrastructure
7
Challenges
● Expensive
● Hard to use
● Specialized hardware
● Inconsistent security policies
● Tremendous human cost to manage and maintain
Confidential. Copyright © Cloudflare, Inc.
8. The problem is: the rapid move to the cloud creates new challenges
Internet
Applications
On-Premise
Multi-Cloud
Hybrid Cloud
SaaS
75% of organizations
use at least one cloud
provider1
54% of organizations
have hybrid or multi-cloud
environment1
Confidential. Copyright © Cloudflare, Inc.1- Forrester Consulting on behalf of Cloudflare
9. A global cloud platform that delivers
security, performance, and reliability across
on-premise, public cloud, hybrid, and SaaS applications.
9
What's needed?
Confidential. Copyright © Cloudflare, Inc.
10. Cloudflare is an intelligent, integrated global cloud network
that delivers security, performance, and reliability for all your
Internet infrastructure, people and connected devices.
CLOUDFLARE’S MISSION:
Help build a better Internet
Confidential. Copyright © Cloudflare, Inc.
11. 27M+
Internet properties
200+
Cities and 95 countries
45B
Cyber threats blocked each day in
Q1’20
99%
Of the Internet-connected population
in the developed world is located
within 100 milliseconds of our
network
Note: Data as of June 28, 2019.
Cloudflare’s network operates at massive scale
Confidential. Copyright © Cloudflare, Inc.
12. PERFORMANCE &
RELIABILITY
SECURITY
Domain Name
System (DNS)
Firewall
AnalyticsWorkers
IoT Security
Cache
Load Balancing
SSL/TLS
Secure Origin
Connection
Rate
Limiting
Bot Management
DDoS Protection
Intelligent
Routing
Image
Optimization
Access
CLOUDFLARE FOR INFRASTRUCTURE
CLOUDFLARE
FOR TEAMS
Magic Transit
Gateway
Workers KV
SERVERLESS
APPLICATION
PLATFORM
Stream
Integrated, Intelligent Global Cloud Network
13. How does Cloudflare work?
Accelerated Performance
Cloudflare’s Globally
Distributed Network
Attackers
Visitors /
Users
Crawlers,
Bots
Multi-Cloud
On-premise
Hybrid Cloud
SaaS
Confidential. Copyright © Cloudflare, Inc.
14. With a reverse proxy, setup is a DNS change
Without Cloudflare, an origin is
exposed to visitors and attackers.
Origin ServerVisit/User 1.2.3.4
With Cloudflare, all requests route to
the nearest data center via Anycast
and proxy to the origin.
Origin ServerVisit/User
104.x.x.x
Nearest
Cloudflare Data
center
1.2.3.4
Confidential. Copyright © Cloudflare, Inc.
16. Millions of dollars invested in building and
securing web properties can go to waste if your
DNS fails and your customers can’t find you.
17. SECURITY
Weak link in
security strategy
PERFORMANCE
Slows down your
user experience
RELIABILITY
Single point of
failure for online
availability
Confidential. Copyright © Cloudflare, Inc.
Impact of a weak DNS strategy
You’re only as fast and available as your DNS is.
18. Confidential. Copyright © Cloudflare, Inc.
Enterprise DNS strategy has evolved
● Maintain on-prem DNS
infrastructure
● Resides behind the
corporate firewall
● Slow query resolution for
distant traffic
● Leverage multiple DNS
providers to maximize
redundancy
● No single point of failure
Multi-DNS Setup
● Managed DNS provider acts
as Authoritative DNS —
maintaining DNS records and
resolving queries
● Offers better speed and
protection
● Improved redundancy
compared to traditional DNS
setups
Single Managed Provider
In-House DNS
19. Confidential. Copyright © Cloudflare, Inc.
Different DNS setups to
increase redundancy
Confidential. Copyright © Cloudflare, Inc.
19
20. ● Improve speed
● Reduce TCO
● Minimize effort
● Attain superior security
posture
Confidential. Copyright © Cloudflare, Inc.
Managed
Authoritative DNS
Authoritative DNS Hidden Master Primary-Secondary Multi-Master
1
21. ● Primary/Master DNS
(usually maintained by the
organization itself)
maintains and updates all
records
● Managed DNS provider
acts as Secondary — gets
a copy of the record and
faces the public internet
Confidential. Copyright © Cloudflare, Inc.
Authoritative DNS Hidden Master Primary-Secondary Multi-Master
2
Hidden Master
Secondary DNS
22. ● Primary DNS maintains and
updates all records and
secondary DNS gets a copy of
the record
● Both primary and secondary
DNS resolve queries, with
recursive resolvers deciding
which one to use.
● Single or multiple secondary
DNS can be deployed
Confidential. Copyright © Cloudflare, Inc.
Authoritative DNS Hidden Master Primary-Secondary Multi-Master
3
23. Confidential. Copyright © Cloudflare, Inc.
Authoritative DNS Hidden Master Primary-Secondary Multi-Master
4
Primary DNS
Primary DNS
● Two DNS providers can be set
up as primary
● No zone information passes
from one to the other —
updates are made
independently on each system
● Both providers face the public
internet
25. Cloudflare acts Secondary DNS,
maintaining a copy of the records
and receiving updates from the
Primary DNS.
Organizations can maintain their
own Primary DNS or get a
Managed DNS provider to act as
Primary.
Cloudflare protects and
accelerates any organization’s
DNS infrastructure.
Organizations maintain their own
DNS infrastructure — maintaining
and updating their DNS records.
Secondary DNS
Confidential. Copyright © Cloudflare, Inc.
Authoritative DNS DNS Firewall
Cloudflare acts as Authoritative
DNS, maintaining and updating all
DNS records.
Organizations onboard and
configure their DNS records to
Cloudflare.
Cloudflare DNS
Choosing the right setup is critical
Cloudflare Managed DNS
26. Enterprise-grade managed DNS service that offers the
fastest response time, unparalleled redundancy, and
advanced security.
Confidential. Copyright © Cloudflare, Inc.
Cloudflare DNS
28. Cloudflare Load
Balancing comes with
built-in unlimited and
unmetered DDoS
mitigation
Confidential. Copyright © Cloudflare, Inc.
Our Global Anycast
Network allows DNS
resolution in each of our
data centers across 200+
cities.
Zero Downtime
A global network with high redundancy
29. Confidential. Copyright © Cloudflare, Inc.
Superior Performance
Cloudflare DNS is the fastest in the world
Cloudflare Load
Balancing comes with
built-in unlimited and
unmetered DDoS
mitigation
30. Cloudflare Load
Balancing comes with
built-in unlimited and
unmetered DDoS
mitigation
Confidential. Copyright © Cloudflare, Inc.
Built-in DNSSEC adds an
additional layer of security
at every level in the DNS
lookup process.
Integrated Security
One-click DNSSEC along with unmetered, unlimited DDoS mitigation
31. Cloudflare Load
Balancing comes with
built-in unlimited and
unmetered DDoS
mitigation
Confidential. Copyright © Cloudflare, Inc.
Migrate your DNS
records in bulk within
minutes using our
dashboard or API
Onboarding and configuration support
Migrate with zero downtime
32. Confidential. Copyright © Cloudflare, Inc.
Granular analytics
Leverage data to make the right decisions
Cloudflare Load
Balancing comes with
built-in unlimited and
unmetered DDoS
mitigation
Know the health of your
DNS traffic in real-time
36. Confidential. Copyright © Cloudflare, Inc.Confidential. Copyright © Cloudflare, Inc.
36
Contact us:
Dina Kozlov (dkozlov@cloudflare.com)
Christopher Shelley (cshelley@cloudflare.com)