The DNS monitoring feature can detect DNS resolution problems such as DNS hijacking and DNS poisoning at the earliest opportunity. This feature improves the security and stability of DNS resolution.
Overview
The DNS monitoring feature works based on Network Analysis and Monitoring of CloudMonitor. More than 200 monitoring nodes are deployed around the world to help you perform synthetic monitoring on your domain names that are hosted on Alibaba Cloud DNS. You can monitor the performance of the domain names, such as the resolution delay and availability, at different Internet service providers (ISPs) in different regions. The DNS monitoring feature can detect DNS resolution problems such as DNS hijacking and DNS poisoning at the earliest opportunity. This feature improves the security and stability of DNS resolution.
Benefits
Wide coverage: More than 200 monitoring nodes are deployed around the world. This feature covers major ISPs, provinces, and regions in China.
Good effect: The depth of recursion is reduced on public DNS servers. The speed and success rate of DNS resolution are increased.
Real-time data: This feature allows you to check the status of DNS resolution in real time. This shortens the issue fixing duration, reduces the service downtime, and improves customer experience.
Minimal impact: This feature helps reduce the impact of DNS hijacking and DNS poisoning.
Usage notes
This feature works based on Network Analysis and Monitoring of CloudMonitor. Before you use this feature, you must enable Network Analysis and Monitoring. The site monitoring feature of CloudMonitor is upgraded to Network Analysis and Monitoring. If you do not enable Network Analysis and Monitoring, you cannot use the DNS monitoring feature after August 31, 2022.
Rules
1. Impact of resolution modification on DNS monitoring
Remove a domain name, transfer a domain name across accounts, retrieve a domain name: DNS monitoring automatically deletes the monitoring task for the domain name.
Delete a DNS record: If the host record has other DNS records, DNS monitoring keeps working. Otherwise, DNS monitoring automatically deletes the monitoring task for the subdomain.
Modify the mapping IP address: The mapping IP address is synchronously updated in DNS monitoring.
Change the DNS record type to A or CNAME: If both an A record and a CNAME record are configured for a host record, DNS monitoring deletes the monitoring task for the subdomain.
DNS monitoring monitors a subdomain based only on the A record or CNAME record. If the record type changes to other types, DNS monitoring stops the monitoring task for the subdomain.
Add a DNS record: If an A record and a CNAME record are configured in different resolution lines for the same host record, DNS monitoring deletes the monitoring task for the subdomain.
2. Limits
You can configure only A records or CNAME records for subdomains if you want to monitor the subdomains by using DNS monitoring.
DNS monitoring supports only the domain names hosted on Alibaba Cloud DNS.
DNS monitoring does not support wildcard domain names.
DNS monitoring does not work if an A record and a CNAME record are configured in different resolution lines for the same host record.
You cannot apply DNS monitoring to the domain names that belong to another Alibaba Cloud account.