Deployment Options

UltraDDR offers users increased flexibility via the many ways in which it can be implemented within an environment. This Deployment Option guide describes the various methods in which UltraDDR may be used, as well as information on what type of environment it’s most suited for. Each option is not mutually exclusive from the others, in that it is possible to mix and match deployment options.

Resolver

UltraDDR can function as the external DNS recursor, resolving domain names to IP addresses and applying security simultaneously. This deployment method is most useful if many of your corporate systems that need protection use your corporate DNS servers. Changing an enterprise to use UltraDDR as the external DNS recursor is a very straightforward task and generally takes less than five minutes using the following simple steps.

Click on the icon, and then select Organization Settings. From the left-hand navigation menu, select UltraDDR Resolver.

 

 

Step 1: Set UltraDDR as Your DNS Resolver

  • Update your DNS settings or firewall to use the two UltraDDR Anycast IPs—one as primary, one as secondary. These IPs automatically route to the nearest UltraDDR resolver for optimal speed and resilience.

Step 2: Configure Source Networks

  1. Navigate to Source Networks from the left-hand navigation menu and add your CIDR blocks or public IPs. This ensures DNS traffic is routed through the correct instance and enforces your policies.

  2. For a corporate office, this will likely be the address or CIDR block where your current external recursive servers are.

  3. In the Source Networks section, enter the specific IP addresses or CIDR blocks where your recursive traffic will be coming from.

  4. Update your DNS configuration to use UltraDDR as your upstream DNS resolver. All external DNS traffic will flow through and be protected by UltraDDR, with full blocking of malicious traffic occurring when in Blocking Mode.

IP Addresses for UltraDDR DNS Resolvers

IPv4

204.74.103.5

204.74.122.5

Ipv6

2610:a1:3092::5

2610:a1:3090::5

Updating the Windows Server

2012 and 2012 R2

  1. From the Start menu, click Administrative Tools, then select DNS.

  2. Choose the server you want to edit, then select Forwarders.

  3. Click the Edit button.

  4. Add the UltraDDR IP addresses (from the list above) in the IP address list.

    1. Please write down your current DNS settings before switching to UltraDDR, in case you want to return to your old settings for any reason.

  5. Click OK, and then click Ok again a second time to finish.

2008 and 2008 R2

  1. From the Start menu, select Administrative Tools, then select DNS.

  2. Choose the server you want to edit, then select Forwarders.

  3. Click the Edit button

  4. Add the UltraDDR IP addresses (from above) in the IP address list

    1. Please write down your current DNS settings before switching to UltraDDR, in case you want to return to your old settings for any reason.

  5. Click OK.

  6. Click OK.

2003 and 2003 R2

  1. From the Start menu, select Administrative Tools, then select DNS.

  2. Choose the server you want to edit, then select Forwarders.

  3. Select All Other DNS domains in the DNS domain list.

  4. Add the UltraDDR IP addresses (from above) in the selected domain’s forwarder IP address list.

    1. Please write down your current DNS settings before switching to UltraDDR, in case you want to return to your old settings for any reason.

  5. Click OK.

Update the BIND Server

  1. Configuration files for bind (9) are located in the /etc/bind directory.

  2. Edit the named.conf.options file to configure the server as a forwarder.

options {
      directory “ /var/cache/
bind”;
      recursion yes;
      allow-query [
goodclients; };
      forwarders {|
           204.74.103.5;
           204.74.122.5;
           2610:a1:3092::5;
           2610:a1:3090::5;
};

UltraDDR Agent

The UltraDDR Agent is available for installation on Windows, macOS, iOS, and Android platforms. This deployment method is useful if many of your users and devices are not on-premises, whereby relying solely on your corporate DNS servers is not sufficient for complete coverage. Please see our UltraDDR Agent documentation for additional details on deployment steps.

The UltraDDR Agent for Windows and macOS can be downloaded from https://updates.ultraddr.com.

iOS (iPhone and iPad)
Google Play Store (Android devices)