VERISIGN® DYNAMIC TRAFFIC MANAGEMENT

DATA SHEET
VERISIGN® DYNAMIC TRAFFIC MANAGEMENT
INCREASE AVAILABILITY, IMPROVE USER EXPERIENCE, AND OPTIMIZE GLOBAL LOAD
BALANCING IN THE CLOUD
The longer your website visitors have to wait for your site to
load, the less likely they are to stay on your site. This could
result in lost revenue and brand value, all for something
that could be easily avoided. Global load balancing in
the cloud is an effective and efficient way to boost your
site’s performance, improve user experience, increase
availability, and help protect your DNS infrastructure from
DDoS attacks.
Complex, global website traffic is commonly managed
today utilizing a hardware-based solution. The costly
combination of the initial capital outlay, operational
maintenance, future skilled staffing requirements makes
this an expensive and complex approach to effective
traffic management. This approach also increases your
risk of downtime due to DDoS attacks.
Verisign Dynamic Traffic Management (DTM) in the cloud
is designed to meet the complex needs of organizations
like yours. Verisign puts the power at your fingertips to
dynamically improve Internet service performance and
availability utilizing rules-based scripts with virtually
unlimited options for customization.
GLOBAL TRAFFIC MANAGEMENT IN THE CLOUD BEST PRACTICES FOR MANAGING YOUR COMPLEX
NETWORK NEEDS
The easily deployable Verisign DTM enables you to use
any relevant data, including performance metrics, to direct
Internet traffic using scripts tailored to your company’s
needs. With Verisign DTM you can choose the appropriate
Content Delivery Network (CDN) based on dynamically
updated information, including time-of-day and geographic
pricing. The possibilities are nearly endless, enabling
your organization to direct traffic based on virtually
unlimited criteria.
Additionally, Verisign DTM will help protect your
organization from the risk of outages caused by DDoS
attacks. Verisign DTM is built on our proven, globally
deployed and secure DNS infrastructure. Our DTM solution
is delivered through the value-added service options of
Verisign Managed DNS, specifically:
•• Weighted-Load Balancing
•• Geo-Location
•• Failover
As depicted in the graphic on the next page, end users are
directed to a data center or cloud platform based on your
business rules as captured in a DTM script. Multiple factors,
such as, performance metrics, CDN pricing, user location
or nearly any other enterprise criteria can be scripted to
determine DNS responses.
VerisignInc.com
Verisign Public
Verisign Dynamic Traffic
Management Platform
End User
Enterprise Criteria
User Location
Recursive
Server
CDN Pricing
3rd-Party Monitoring
Cloud
DC-SF
DC-NY
Servers
FEATURES AND BENEFITS – VERISIGN DYNAMIC
TRAFFIC MANAGEMENT
Supported by Verisign’s trusted and reliable global
infrastructure, the features and benefits include:
Cloud-based Delivery Model
•• Enhanced availability and performance of your critical
Internet services
•• Scalability: Vastly deployed cloud-based DNS
infrastructure allows your organization to scale the
service based on your organization’s unique and
evolving requirements
•• Lower Total Cost of Ownership: No capital expenses
and lower operating costs in comparison to hardware
solutions
•• Fast and seamless deployment (typically within
three days)
•• Decreases the risk of downtime due to DNS-based
DDoS attacks
Traffic Management Determined by Script
•• Utilizes custom code scripted in the Lua programming
language that enables you to develop virtually unlimited
traffic-management scenarios
2
•• Integrates virtually any criteria (utilizing a SOAP-based
API) to include third-party monitoring data, enterprisedriven metrics and complex business rules
•• Enables your organization to change traffic
management configurations quickly and easily
Software Development Toolkit
•• Includes pre-developed templates of commonly used
traffic scenarios
•• Development tool helps you to easily design your own
custom scripts
•• Create and test unique traffic-management scenarios,
limited only by your imagination
Real-Time Performance and Availability Metrics Help
Direct Website Traffic
•• Integrated system-health monitoring utilizing Verisign
probes
•• Easy integration of server health status and/or thirdparty performance-monitoring tools
Customer Portal
•• Enables unlimited access and control from multiple
users anywhere at any time
Verisign Public
STANDARD TRAFFIC MANAGEMENT SERVICES
For organizations with basic traffic management needs,
Verisign also offers a set of standard, cloud-based traffic
management services that provide all of the availability,
performance, DDoS-attack resilience and scalability
benefits of Verisign DTM without the dynamic capabilities
of script-based traffic rules.
Standard traffic management services all utilize a
static configuration model to realize custom scenarios
determined prior to deployment. The services include:
Failover: Helps you avoid outages by routing users around
slow or inoperable sites. The service monitors websites
or Internet services using a variety of protocols, including
DNS, Ping (ICMP) HTTP/HTTPS and SMTP, to determine
system health and provide a back-up answer in response to
queries when the primary service is unavailable.
Geo Location: Enhances user experience by reducing
latency and increasing uptime. Geo Location globally
directs Internet traffic among worldwide data centers,
CDNs or cloud platform providers and also delivers a DNS
response based on the recursive resolver’s geographic
location. The service also enables the delivery of locationspecific content.
Weighted Load Balancing: Enables you to optimize
infrastructure usage by balancing end-user traffic among
multiple data centers by specifying the relative amount
of traffic each server should receive. When this service is
activated, the service responds with different authoritative
DNS responses each time a particular query is received in
proportion to the weights you specify.
IMPROVE WEB PERFORMANCE WITHOUT
SACRIFICING CONTROL
Whether your company is utilizing Verisign Dynamic Traffic
Management or standard traffic management, you can
rest easy knowing that you’ve trusted your unique traffic
management processes with a proven, trusted service
provider. Our vastly deployed, global, traffic-management
services will improve your organizations’ flexibility,
capacity and control, while lowering your total cost of
ownership and improving end-user experience.
Verisign Public
TRULY GLOBAL TRAFFIC MANAGEMENT
FROM A TRUSTED PROVIDER OF INTERNET
INFRASTRUCTURE SERVICES
Verisign’s traffic management solutions, offered as valueadded service options of Verisign Managed DNS, leverage
the proven expertise of Verisign, a leading provider of
Internet infrastructure services and cyber security. Our
traffic management services utilize 17 fully redundant,
globally distributed DNS resolution supersites that help
minimize website latency while optimizing availability.
Verisign has managed the .com and .net top-level
domains (TLDs) with operational accuracy and stability for
more than 16 years, setting the unmatched standard for
DNS uptime. These domains make up nearly 50 percent
of the domains on the Internet, driving more than 70 billion
queries per day. Many other providers of managed DNS
services also provide DNS to other Internet TLDs, but none
possess the track record of success in maintaining the
DNS uptime of Verisign.
LEARN MORE
For more information about Verisign’s traffic management
services, contact us: [email protected].
ABOUT VERISIGN
As the global leader in domain names, Verisign powers the
invisible navigation that takes people to where they want
to go on the Internet. For more than 16 years, Verisign
has operated the infrastructure for a portfolio of top-level
domains that today includes .com, .net, .tv, .cc, .name,
.jobs, .edu and .gov, as well as two of the world’s 13
Internet root servers. Verisign’s product suite also includes
Managed DNS Services, Distributed Denial of Service
(DDoS) Protection Services and iDefense® Security
Intelligence Services. To learn more about what it means
to be powered by Verisign, please visit VerisignInc.com.
3
Verisign Traffic Management Services
FAILOVER
GEO LOCATION
Monitor service availability and failover to a backup server, data
center, CDN or cloud platform provider when issues occur.
Dynamically returns different DNS responses based on the
location of the recursive resolver making a DNS query.
Features include:
Features include:
•• Reply with backup A or CNAME in the event of a service
issue
•• Highly granular location, including continent, country, state
and city
•• Supports active/active and active/passive configurations
•• Works with all resource record types
•• View status of each monitored element, including trace
routes
•• Utilizes a highly accurate, commercial database to map IP
addresses to location
•• Customize tests by defining probe intervals, evaluation
•• Supports IPv6 DNS queries
•• Multiple, geographically dispersed probes help ensure
test validity
•• strings and protocol (HTTP, HTTPS, SMTP, PING or DNS)
•• Email notification when failover occurs
•• Works with A and CNAME records
•• Works in combination with other traffic management
services
•• Works in combination with all other traffic management
services
•• DNSSEC-enabled
•• Works in combination with all other traffic management
services
•• DNSSEC-enabled
WEIGHTED LOAD BALANCING
DYNAMIC TRAFFIC MANAGEMENT
Distribute traffic among multiple servers based on the configured
distribution weight, enabling you to control the amount of traffic
each server, cloud platform service or CDN receives.
A cloud based, DDoS-attack resilient, global load balancing
service that allows you to use any relevant data, including
performance metrics, to dynamically determine DNS responses
utilizing a custom script. Custom scripting is exclusively
available with Verisign DTM and is not included as a part of
our standard traffic management solution.
Features include:
•• Highly flexible, supporting weights from 1 to 999
•• Works with A, AAAA and CNAME records
•• Sticky responses ensure the same response is provided
every time the same recursive server makes an identical
query
•• Works in combination with Geo Location and Failover
features
•• DNSSEC-enabled
Features include:
•• Scripting language: Lua 5.1
•• Name value pairs (e.g., variables) available at both account
and domain levels
-- Updated via the Web portal or a SOAP API
-- Updates typically propagate worldwide in under 30
seconds
•• Health status of hosts probed with the Verisign health-check
system can be used as scripting parameters
•• Built-in scripting parameters
-- Date/Time
-- IP address geo-location
-- IP address matching
-- Sticky random number generation based on incoming IP
•• Works with A, AAAA, CNAME, MX, NAPTR, PTR, SRV and
TXT resource records types
•• DNSSEC-enabled
•• Sample scripts and detailed documentation provided
VerisignInc.com
© 2014 VeriSign, Inc. All rights reserved. VERISIGN and other trademarks, service marks, and designs are registered or unregistered trademarks of VeriSign, Inc. and its
subsidiaries in the United States and in foreign countries. All other trademarks are property of their respective owners.
Verisign Public
VRSN_DTM_Service_DS_201403