Google Cloud DNS

Cloud DNS is Google Cloud's authoritative DNS service, serving zones and records from Google's anycast name servers with a stated 100 percent availability target and automatic scaling. It supports publishing and managing millions of zones and records, and DNS Armor, a cloud-native DNS security service, is available in preview.

Scaling to millions of zones is a requirement that only a particular kind of customer has, and naming it tells you who this is for. A hosting provider, a platform serving custom domains for its own customers, or a large enterprise after acquisitions holds zones in numbers that break tools designed for a company managing its own handful.

DNS Armor addresses a threat most DNS discussion ignores. Compromised systems commonly use DNS to reach command and control infrastructure or to smuggle data out in query names, and because DNS is almost universally permitted outbound, it is the channel that survives when others are blocked. Inspecting resolution for those patterns catches activity a firewall will not.

Running on the same infrastructure as the rest of Google Cloud is the practical draw, since an organisation already there gets consistent identity, logging and infrastructure as code rather than another vendor to integrate.