Introducing Amazon Route 53 Global Resolver for secure anycast DNS resolution (preview)

This article announces Amazon Route 53 Global Resolver (preview), a new service providing secure, globally distributed DNS resolution for public and private domains.

• Resolves both public internet domains and Route 53 private hosted zones globally
• Uses anycast IP addresses routing queries to nearest AWS Region for low latency
• Supports DNS over UDP (Do53), DNS-over-HTTPS (DoH), and DNS-over-TLS (DoT) protocols
• Integrated DNS Firewall with AWS managed domain lists and DGA/DNS tunneling detection
• IP/CIDR allowlists and token-based authentication for granular access control
• DNSSEC validation and EDNS Client Subnet support for enhanced security
• Eliminates need for split-DNS infrastructure across distributed environments
• Available in 11 AWS Regions; existing Route 53 Resolver renamed to VPC Resolver

Route 53 Global Resolver simplifies hybrid DNS management by providing unified, secure resolution across on-premises, branch, and remote locations through a single managed service.