Built-in Cloudflare DNS Firewall
We have incorporated Cloudflare DNS Firewall into our primary DNS servers to accelerate and protect domain resolution for all our customers.
From now on, when visiting any site that uses our DNS, requests will resolve to the corresponding server 3x faster from anywhere in the world.
DNS Firewall sits between the visitor’s resolver and our authoritative DNS server. It caches DNS responses at the edge of Cloudflare’s network and responds to queries from the point closest to the visitor, instead of sending them to the origin server. This enables fast resolution globally, regardless of where the site is hosted.
In addition to speed, it adds layers of security and availability:
If the origin DNS server does not respond, a cached response can be served to keep the site accessible.
It limits the number of queries per second that reach the origin servers and absorbs DDoS attack traffic on Cloudflare’s network.
You don’t need to make any changes: activation is transparent across our DNS infrastructure and applies to the resolution of domains we already manage.
DNS Firewall also helps keep the IP addresses of our origin DNS servers hidden, reducing their direct exposure to potential attacks.
It is important to distinguish this improvement from other Cloudflare services: DNS Firewall protects and accelerates Duplika’s DNS infrastructure and does not replace services such as Cloudflare CDN, WAF, or Cloudflare Pro, which a customer may use additionally to specifically protect and accelerate their website. Learn more on our Cloudflare page.