Hamilton adopts new made-in-Canada DNS; leads Canadian cities in IT resiliency
The City of Hamilton has adopted .CA D-Zone Anycast DNS from the Canadian Internet Registration Authority (CIRA) as part of its plan to create a robust and reliable IT network. One of Canada’s 20 largest cities, Hamilton’s IT department provides services such as parks and recreation registration, parking ticket payments and taxation inquiries for more than half a million citizens directly from www.hamilton.ca.
In an effort to ensure consistent availability of key city services, Hamilton’s IT department needed a secondary DNS for its highest traffic sites, including city, tourism and police websites.
- Implementation of .CA D-Zone Anycast DNS secondary service to answer all external DNS queries is part of a solid IT risk management plan and a commitment by the city to offer the best online service to its citizens.
- Analysis of Hamilton’s existing DNS showed that an attack on the City’s existing name servers had the potential to bring down the main tools for communication – primarily email and the web interface.
- D-Zone offers a globally distributed cloud of name servers which share a single IP address. Layer three routing automatically routes queries to the closest name server. The massive distributed capacity and bandwidth of the D-Zone Anycast DNS service adds DDoS resiliency.
- The implementation of D-Zone has been cost-effective. It did not require any capital equipment or change to Hamilton’s DNS administration process. The interface between the municipality’s existing name servers and D-Zone is a secure DNS zone transfer via TSIG. For the IT team, the reporting features of D-Zone provide information on the traffic patterns and health of the DNS.
"As part of our own enterprise risk management, we have taken note of DDoS attacks on government sites. We wanted to make sure the City’s information is better protected and that Hamiltonians can access online services with reliability and speed. That there was no capital investment required and a lot of support up front and ongoing from the Canadian Internet Registration Authority makes D-Zone Anycast an excellent choice for the City of Hamilton."
Chief Security & Technology Architect for the City of Hamilton