What is our primary use case?
My primary use case for IBM NS1 Connect is improving the availability and the response time for our internet-facing applications by directing users to healthy and appropriate endpoints. For example, organizations with application instances in multiple regions can use health checks and traffic steering policies to avoid sending new DNS responses to an unhealthy endpoint.
With respect to how I use health checks and traffic steering policies in my day-to-day work, it helps us improve application availability and reduce latency. For example, if the application is running in two different regions and one region becomes unhealthy or starts responding slowly, IBM NS1 Connect helps us detect the endpoint issues. A heartbeat request is sent to both servers, and if any of the servers does not acknowledge the request, then IBM NS1 Connect will assume that this server has gone down. With this, we can redirect new requests to the healthy alternative server, which reduces the need for manual DNS changes during incidents, helping us to minimize disruption for users.
How has it helped my organization?
IBM NS1 Connect impacts my organization positively by saving eight engineer hours per month; at a fully loaded cost of $40 per hour, that is $320 monthly or $3,840 annually in labor value. This avoids downtime during important incidents that require our support.
Regarding specific incidents where IBM NS1 Connect helped avoid downtime or saved significant time or money, one example is that we found routing users to a geographically nearest location did not always provide the fastest connection. We used performance-based DNS routing with IBM NS1 Connect, which reported a 10 to 15 percent latency improvement, allowing users at the 75th percentile to reach good responses while we could direct them to the nearest geographically located server. Additionally, we had a complex traffic steering situation that saved millions.
What is most valuable?
The best features IBM NS1 Connect offers include the authoritative DNS filter chain, traffic steering policies, and endpoint health monitoring, along with its API-first automation and DNS reporting, which are all some of the most valuable features.
Out of those features, I find myself relying on the traffic steering policies the most because we detect the endpoints and steer new DNS responses towards healthy alternatives. This is very helpful because whenever there is a massive amount of requests coming into the region or to the server, and for a better user interface and customer experience, we should not show the user that the server is down. We can reroute the request to the server nearest to that region, making it an important capability. The authoritative DNS ensures DNS queries for domains and reliable DNS resolution are essential for users, particularly to discover application endpoints, but it alone does not guarantee this. The API-first automation automates DNS configurations and changes through APIs and infrastructure as code workflows, reducing repetitive manual work and the risk of human error. The DNS reporting and analytics help teams understand query volume, traffic distribution, and unusual behavior under the support of troubleshooting and capacity planning.
What needs improvement?
I believe that while every service provided by IBM NS1 Connect is crucial for the future, there are areas for improvement such as making filter chain configuration easier, improving monitoring and incident troubleshooting, and possibly enhancing documentation and onboarding facilities.
Concerning the needed improvements, with regard to filter chain configuration, I think advanced traffic policies can be difficult for new teams. A visual policy builder or plain language explanations, or a simulator that shows which endpoint each rule selects, would be very helpful for new team members and would significantly reduce configuration mistakes while speeding up onboarding.
For how long have I used the solution?
My experience with IBM NS1 Connect spans one and a half years, during which I have used it in production and pilot environments. I have worked with some of the main important features.
What do I think about the stability of the solution?
IBM NS1 Connect is stable so far, and we have not faced any issues yet.
What do I think about the scalability of the solution?
The scalability of IBM NS1 Connect depends on the plan, including query record limits, monitor limits, and filter limits, but generally, the application is scalable along with the DNS traffic profile.
How are customer service and support?
Our experience with customer support has been mixed; while some team members are really helpful and responsive, there have been instances where responses to complex technical issues are slower because they need to evaluate and provide support. Moreover, I believe subscribing to a higher plan would ensure immediate support to prevent losing too many customers, particularly premium customers.
I would rate customer support as three out of ten.
Which solution did I use previously and why did I switch?
Previously, we have been using IBM Management Connect since the very beginning.
What was our ROI?
Regarding return on investment, this automation saves eight engineer hours per month, which at $40 per hour translates to about $320 monthly and approximately $3,840 annually, allowing us to save around four to five lakhs of rupees.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing reveals that before selecting this product, these factors were crucial because every organization considers these aspects before making a purchase decision. My experience indicates that the initial technical setup is fairly straightforward, and once DNS architecture and requirements are clear, the advanced graphic tools and integrations require some planning and testing. Licensing poses a more challenging part since the cost depends on the plan, DNS query volume, check monitors, filter limits, and additional capabilities. Some of our clients have described the pricing as expensive compared to alternatives, so I recommend organizations assess their requirements and desired features to better understand the implementation and costs involved.
Which other solutions did I evaluate?
Before choosing IBM NS1 Connect, we evaluated other options, specifically Amazon Route 53 and Cloudflare. We found that since Azure DNS fits naturally into our Azure ecosystem, we wanted better and optimized DNS performance and intelligent traffic steering mechanisms, leading us to choose IBM NS1 Connect based on these two standout requirements.
What other advice do I have?
I rate IBM NS1 Connect as seven out of ten.
I choose seven out of ten for IBM NS1 Connect because it provides many good definitions and capabilities such as strong intelligent traffic steering, monitoring, DNS automation, and global management. These capabilities help reduce downtime, improve application performance, and minimize manual operational work, but I find the advanced filter chain configurations present a learning curve, and troubleshooting and testing could be more intuitive. Pricing is also a concern when compared to alternatives like Amazon Route 53 and Azure DNS. Overall, it is a capable solution for our organization.
Regarding IBM NS1 Connect's governance and security capabilities, I think they are strong. Organizations are very keen to understand how their data is protected and how customer data is not breached in online security protocols, making this a crucial criterion before purchasing. I believe that IBM NS1 Connect has a solid foundation for DNS governance and security, supporting role-based user and API key management and accountability visibility. DNS security protects the integrity of DNS responses, while from a governance perspective, utility teams can manage access according to responsibilities and automate DNS changes through APIs. However, more intuitive audit and rollback capabilities directly in the interface, along with clearer visibility into changes made, are necessary. The overall security capabilities are valuable, but strong access controls, change reviews, and monitoring are still necessary to maintain a secure direction.
For IBM NS1 Connect's accuracy and reliability of output, since we have been using it, I feel it is very reliable in terms of DNS resolution and intelligent traffic steering. Its ability is phenomenal, especially when configured with accurate health checks and performance data. It helps direct users toward suitable endpoints and improve routing decisions. The output is also accurate as monitoring data checks configurations and policies to provide actual output. However, false positives, false signals, or incorrect rules can result in traffic being directed toward unsuitable endpoints, which is why I rate it as a seven. It is beneficial, but there is room for improvement.
My advice to others looking into using IBM NS1 Connect is to first figure out what their requirements are and ensure they have a clear understanding of it. For those particularly interested in optimized versions of intelligent traffic steering and health monitoring checkups, they can proceed with selecting IBM NS1 Connect, but I strongly recommend exploring other options as well.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?