Internet authoritative DNS traffic analysis, DNS query volume statistics, detailed DNS response logs, DNS line hit analysis - Alibaba Cloud DNS

Analyze DNS query traffic patterns, monitor resolution trends, and access 90-day raw DNS logs for domains hosted on Alibaba Cloud DNS.

Overview

DNS traffic analysis is a major upgrade to the Query Volume Statistics feature of Internet Authoritative DNS. It analyzes DNS query traffic for domain names hosted on Alibaba Cloud DNS to support efficient DNS O&M. The feature also archives raw DNS logs for 90 days to meet audit and compliance needs. Key features:

DNS query volume statistics, including query volume trends and rankings by domain name.
DNS query source analysis.
DNS line hit analysis.
DNS response characteristic analysis.
Detailed DNS response log query.

To get started, Enable or disable traffic analysis for a domain name. For high query volumes, purchase Authoritative DNS Traffic Analysis (Data Transfer Plan).

Important

Query volume statistics count DNS queries from carrier local DNS servers to Alibaba Cloud DNS, not website traffic. After a local DNS server receives a response, it caches the result until TTL expires without re-querying. The statistics indirectly reflect website access patterns. The geographic distribution of query sources refers to the location of the carrier local DNS that sends the queries.

Scenarios

1. Monitor DNS migration progress

When migrating DNS from another provider to Alibaba Cloud DNS, use Query Volume Statistics to verify traffic is shifting. A gradual increase in query volume confirms migration progress. Use query source analysis to identify which regions are sending queries to Alibaba Cloud DNS. Regions showing no traffic may still have unexpired carrier DNS cache entries.

2. Verify DNS record changes

After changing a DNS record, use DNS traffic analysis to confirm it took effect. For example, after adding a subdomain record for an online service, use Query Volume Statistics to monitor query traffic for that subdomain and determine the service's online status. If you configure split-zone resolution with a fine-grained line policy (such as resolving China East (Telecom) to 1.1.X.X), use line hit analysis to verify the new line receives query hits and confirm that the policy is receiving DNS traffic.

3. Troubleshoot DNS resolution accuracy

To troubleshoot DNS scheduling accuracy for endpoints (PCs or mobile phones), use the detailed DNS response log. For example, access a non-public service subdomain from an endpoint, then look up its response log. The log shows the query source IP, whose region and carrier properties reveal any scheduling inaccuracy.

Limits

Subscribe to Alibaba Cloud DNS (Pay-As-You-Go) before using DNS traffic analysis. After subscribing, you can enable the feature for any domain name. For more information about the billing rules, see Billing.
Without the Authoritative DNS Advanced Service (Pay-As-You-Go), you can only use Query Volume Statistics for domain names attached to an Authoritative Hosted Domain Name (Subscription) plan. Advanced features (query source analysis, line hit analysis, response characteristic analysis, and detailed response log query) are unavailable. Domain names on the Free Edition cannot use any DNS traffic analysis features.
DNS traffic analysis covers resolution data from the last 90 days only. Raw DNS resolution logs are also retained for 90 days.
During a large-scale flood attack on a DNS server, the spike in resource usage (such as bandwidth) may prevent complete logging of resolution traffic.