Cloudflare DNS is an enterprise-grade authoritative DNS service that offers the fastest response time, unparalleled redundancy, and advanced security with built-in DDoS mitigation and DNSSEC.
Need more than DNS? Explore our Enterprise plan.
Our global Anycast network allows DNS resolution at the network edge in each of our data centers across 300+ cities.
Cloudflare offers built-in DDoS protection and one-click DNSSEC to ensure your applications are always safeguarded from DNS attacks.
Our authoritative DNS is the fastest in the world, offering DNS lookup speed of 11ms on average and worldwide DNS propagation in less than five seconds.
All your domains can be managed through our user-friendly interface or via an API, regardless of where your Internet properties are hosted.
"Cloudflare has an incredibly large network and infrastructure to stop really large attacks on the DNS system. We just get clean requests and never have to deal with malicious traffic or attacks on the DNS infrastructure."
Sam Kottler
Engineer, Digital Ocean
Relieve your organization from the costs and stress of DDoS attacks against your DNS. With Cloudflare Managed DNS, you get unlimited and unmetered mitigation against DNS-based DDoS attacks. Our network capacity is 23x bigger than the largest DDoS attack ever recorded.
Cloudflare Managed DNS comes with built-in DNSSEC to protect your users from on-path attacks that can spoof or hijack your DNS records. DNSSEC adds an additional layer of security at every level in the DNS lookup process. The best part — you can easily deploy DNSSEC at the click of a single button.
Get in-depth, real-time analytics into the health of your DNS traffic — all easily accessible from the Cloudflare Dashboard. Generate detailed raw and visual reports for your DNS queries - filtered by response codes, record types, geography, domains, etc. Raw log files are also available via API and can be integrated with SIEM/parsing tools.
Ensure peace of mind with our easy-to-use Email Security DNS Wizard to prevent malicious actors from sending fraudulent emails on behalf of your domain — configure the required email DNS records with just a few clicks. We will warn you if we detect missing or insecure email configuration on your domain.
Learn more about SPF, DKIM, and DMARC in our Learning Center.
Cloudflare helps reduce the load on public DNS infrastructure by functioning as an operator of the AS112 project, assisting the community-operated, loosely-coordinated anycast deployment of DNS servers that primarily answer reverse DNS lookup queries that are misdirected and create significant, unwanted load on the Internet.
Learn more about Cloudflare’s impact on the AS112 project via Cloudflare Radar.