//Edge DNS

Secure, highly available authoritative DNS

Manage your zones on Azion's global infrastructure with DNSSEC, DDoS protection, and AI enabled management on a single platform.

Global distributed architecture

Host DNS zones with automatic redundancy, keeping domains accessible worldwide.

Protection without another security layer

Use native DDoS protection and DNSSEC without additional security products.

Unified operation of your DNS

Operate DNS, delivery, and security in one environment, all in one place.

Optimized global DNS performance

Automatic routing resolves queries from the nearest location, delivering consistent DNS resolution.

Monitor DNS performance and availability

Connect DNS activity with application telemetry to investigate incidents without crossing disconnected monitoring tools.

Developer-first API

REST APIs and MCPs enable automated zone management, record operations, and DNSSEC configuration.

//Built for reliability

Easy management and complete control

DNSSEC and cryptographic authentication

Protect against DNS spoofing, poisoning, and hijacking with DNSSEC digital signatures backed by automatic Chain of Trust validation for every DNS response.

Diagram: a resolver protected by DNSSEC accepts the signed answer from Edge DNS and rejects forged answers from attackers, backed by a chain of trust from the root to .com to example.com

Native DDoS protection and threat detection

Stop DNS flood attacks, amplification attempts, and malicious queries automatically. Every query is analyzed and rate-limited in real time, no configuration needed.

DDoS Protection filtering traffic before it reaches Edge DNS nameservers on the Azion platform

Split traffic with weighted policies

Give records with the same name and type a weight from 0 to 255 to set the share of queries each one answers. Shift traffic between origins gradually, or set a weight to 0 to take a record out of rotation without deleting it.

Weighted policy splitting queries for www.example.com across three A records at 60%, 40%, and a disabled record at 0%

Point your apex domain to Azion

Use ANAME records for CNAME-like behavior on the root domain, so example.com can point straight to an Azion application. MX and TXT records keep working on the same name.

Zone for example.com with an ANAME record at the apex alongside MX and TXT records, resolving to an Azion application
GPA
Azion shielded us from sophisticated cyberattacks and empowered us to modernize our infrastructure, reduce costs, and deliver the best shopping experiences to millions of customers.
Allan MonteiroCISO & Head of Technology

Serverless AI-native primitives for autonomous workloads

Frequently Asked Questions

Protect your apps today

Turn on protection against attacks and bad bots now, without blocking real customers.

Bot Manager Lite Starter KitNew stack with Bot Manager Lite in action.
Deploy now
Bot Manager Lite and TOR Block Starter KitBlocks bad bots and Tor exit nodes.
Deploy now
Bot Manager Lite Integration KitAdds Bot Manager Lite to your firewall.
Deploy now
Upstash Rate LimitingRate limiting with Functions and Upstash.
Deploy now
Azion Starter KitBasic stack to explore Azion Web Platform.
Deploy now
AI Inference Starter KitAI app with no origin dependency.
Deploy now