Carrier-Grade DNS Resolution

A carrier-grade DNS solution designed for telecom operators, featuring proactive security protection, high-concurrency processing, intelligent caching, and visualized operations management to ensure reliable, high-performance DNS resolution services.

Product Overview

DNsys is a carrier-grade DNS solution developed by Yamu Technology specifically for telecom operators. With industry-leading proactive security mechanisms and advanced DDoS protection, DNsys easily handles tens of millions of concurrent DNS queries, ensuring the stable and reliable operation of the domain name system. Through technologies such as intelligent cache updates and optimized query response selection, DNsys streamlines the DNS resolution process and enhances end-user network experience. Its kernel-level architecture ensures exceptional performance and reliability, while a centralized visual management platform provides real-time visibility into service status and enables efficient operations management. With its speed, security, stability, efficiency, and control, DNsys has become a trusted choice for telecom operators seeking to improve service quality and strengthen network security.

Key Features

  • High Performance

    Powered by a kernel-level high-performance resolution engine and proprietary algorithms, DNsys delivers industry-leading speed and processing capacity with ultra-low response times.

  • High Security

    Employing multi-layer protection technologies, DNsys effectively defends against common DNS threats such as DDoS attacks, recursive floods, and amplification attacks, ensuring secure and reliable DNS services under all network conditions.

  • High Availability

    Deployed with a distributed Anycast architecture, DNsys ensures service continuity and resilience. Its large-scale caching mechanism significantly improves cache hit rates, enhancing system stability and overall performance.

  • Intelligence

    With intelligent resolution algorithms, DNsys dynamically returns the optimal query response to improve network access efficiency. It provides comprehensive domain optimization and control capabilities to meet diverse operational needs.

  • Visualization

    The DMS (Domain Management System) offers rich monitoring metrics, business alerts, and analytical insights—enabling real-time visibility and centralized control of DNS operations and system status.

Key Benefits

  • Maximize Efficiency

    The kernel-level resolution engine and high-concurrency processing ensure smooth and stable DNS performance even under heavy load, eliminating bottlenecks that can lead to network congestion.

  • Strengthen Security

    DNsys protects telecom operators from DNS-based attacks, safeguarding service continuity and user data integrity. It minimizes downtime and potential losses caused by DNS disruptions.

  • Improved User Experience

    By efficiently handling massive concurrent requests and responding instantly to user queries, DNsys reduces latency and bandwidth usage, delivering faster and smoother online experiences for end users.

  • Gain Full Control

    Operators can flexibly configure and manage DNS services based on business needs. Real-time visibility into key metrics and device status enables quick issue detection and rapid troubleshooting.

  • Lower O&M Costs

    Its centralized, automated management system streamlines configuration, monitoring, and troubleshooting—reducing manual work, downtime risks, and overall operating costs while improving long-term scalability and reliability.

  • Ensure Compliance

    Effectively prevents various DNS attacks, ensuring compliance and strengthening operators’ defense against evolving cyber-security threats.

Core Functionalities

  • High-Performance Resolution Engine

    The core DNS resolution module operates at the kernel level, utilizing Yamu's proprietary DNS protocol algorithm to significantly reduce resolution latency and enhance processing performance. Compared to similar domestic and international products, it delivers superior processing power, more comprehensive security, and shorter response times. It also requires fewer physical devices to achieve the same system metrics, effectively reducing energy consumption and overall costs.

  • Partitioned Caching & Intelligent Updates

    For many domain names in China, different results need to be returned to users in different regions. DNSys can assign specific external recursive servers for users from different areas, enabling partitioned caching to meet these requirements. The system proactively pre-fetches and updates cache for frequently used domains, avoiding increased latency and request backlog that occurs when queries are only made upon cache expiration. This maintains extremely low resolution latency and increases the cache hit rate from 90% to 98%.

  • Multi-Layer Security Protection

    DNsys employs a multi-layer defense system specifically designed for DNS-related threats. It provides comprehensive protection against DDoS reflection, spoofed source IPs, and DNS-based floods, while also preventing cache poisoning, amplification, and recursive abuse attacks.This end-to-end security framework establishes a robust and resilient defense line that ensures the DNS system operates securely and reliably even in complex network environments.

  • Forwarding Control & Forced Resolution

    NSys supports fine-gained, multi-dimensional domain forwarding policies. Configurations can be based on the user, the requested domain, or a combination of both, meeting flexible scheduling needs for various scenarios. It also supports a large volume of forced resolution policies, where requests for specific domains can be configured to return predefined results directly, helping operators comply with regulatory requirements.

  • Cache & Recursion Separation

    Traditional DNS systems often couple caching and recursion tightly, which can degrade overall performance or even cause service outages when recursive queries accumulate. DNsys adopts a decoupled cache-recursion architecture, effectively reducing backend system load. It merges and rate-limits recursive requests intelligently, further easing backend pressure. Even if the recursive system becomes saturated by excessive queries, the caching layer continues operating stably, ensuring uninterrupted DNS service continuity.

  • Intelligent Resolution

    Due to differences in user location and carrier networks, a single static resolution result often fails to optimize access efficiency. DNsys features intelligent resolution, returning customized answers based on user attributes to direct traffic to the optimal server. This reduces cross-carrier traffic, lowers interconnect settlement costs and backbone bandwidth consumption, and significantly improves user access speed and overall network experience.

  • Sample Response Mode

    Under severe DDoS attacks, DNSys can automatically switch to sample response mode. In this state, it uses pre-recorded response samples to answer domain queries, ensuring service continuity. This security emergency mechanism significantly boosts the system's ability to handle large-scale DDoS attacks while maintaining the availability of DNS resolution services.

  • Centralized Visual management & Control

    DNSys can be integrated with the DMS management system, enabling centralized, visual management for all DNS devices within a region. DMS provides comprehensive DNS configuration via a web interface, allowing changes to be applied to all devices simultaneously. Furthermore, DMS offers extensive visibility into device status, operational metrics, alarm information, and DNS data analysis, providing an intuitive and convenient tool for efficient overall DNS business management.