IBM NS1 Connect

What IBM NS1 Connect actually is

IBM NS1 Connect is a managed authoritative DNS platform — not a registrar, not a CDN, not a general cloud. You delegate your zones to it and it answers queries from a global anycast network, with a traffic-steering layer on top that can route users to different endpoints based on health checks, geography, ASN, latency, or real-user measurement data. NS1 was founded in New York in 2013 and acquired by IBM in March 2023; the product now sits inside IBM's networking portfolio but keeps its own portal, API, and documentation at ns1.com and help.ns1.com.

The differentiator has always been the steering. Where most authoritative DNS providers resolve a name to an address and stop, NS1 treats DNS as a routing control plane: filter chains let you compose ordered rules (select pools, shed by geography, prioritize by cost or performance, return an answer) so that a single hostname can steer traffic across multiple CDNs, clouds, or regions at once. Pulsar, an add-on, feeds real-user performance data back into those decisions. If you have one origin in one region and no CDN, almost none of this matters to you, and the price will look strange. If you are running multi-CDN delivery or global server load balancing, this is the category NS1 helped create and still leads in our view.

Underneath the steering is straightforward managed DNS: an API-first platform (REST API, Terraform provider, prebuilt integrations), health-check monitors that pull endpoints out of rotation, HTTPS redirects with managed certificates, zone versioning, and DNS observability reporting. In our view the API-first claim is genuine rather than marketing — everything you can click in the portal is documented as an API call, and infrastructure-as-code workflows are clearly first-class.

Pricing: what you really pay

The published plans (IBM NS1 Connect pricing page, retrieved October 2026) are:

• Trial — free for 30 days: 50M DNS queries/month, 500 DNS records, 20 health check monitors, 10 traffic steering chains, 50 HTTPS redirects, Cloud Sync, zone versioning.
• Essentials — from $99/month: 30–80M queries/month, 1,000 DNS records, 2 health check monitors, 1 traffic filter chain, 5 HTTPS redirects.
• Standard — from $349/month: 50M up to 1B queries/month, 1,000–10,000 records, 2–100 monitors, 1–100 filter chains, zone versioning, and "spike protection" (DDoS + NXDOMAIN waiver).
• Premium — quote only: custom query volumes, unlimited HTTPS redirects, secondary DNS, and add-ons such as Pulsar, Dedicated DNS, and DNS for China.

Two things stand out when you read the table closely. First, the interesting feature — traffic steering chains — is capped at a single filter chain on the $99 tier. Real steering means Standard at $349/month or a Premium quote. Second, overage is not cheap: the IBM store lists query add-ons at $50 per 10M-query request and overage billing at $75 per request on Essentials. A monthly subscription is billed up front and auto-renews; annual billing exists, and at the time of writing IBM advertises 30% off monthly and 40% off annual terms for new subscriptions (renewals excluded). Prices are in USD and exclude taxes.

Our read: the trial is genuinely useful (it includes the steering features the paid tiers gate), but there is no perpetual free tier, and the jump from $99 to $349 is the real decision point. Budget for Standard if steering is why you are here; otherwise a cheaper DNS provider covers resolution and basic failover at a fraction of the cost. We would not run a hobby project on this — the economics only work when DNS uptime and steering are directly tied to revenue. For the wider market context, see our /category/dns-providers comparison.

Performance & infrastructure

The managed DNS network is an anycast deployment of 26 points of presence across six continents (IBM docs and ns1.com/anycasted-network). Published PoP locations cover North America (New York, Ashburn, Atlanta, Miami, Chicago, Dallas, Denver, Seattle, San Jose, Los Angeles, Toronto), South America (São Paulo, Bogotá), Europe (London, Paris, Marseille, Amsterdam, Frankfurt, Bucharest, Helsinki), Asia-Pacific (Mumbai/Chennai, Tokyo, Hong Kong, Singapore, Sydney), and Johannesburg in Africa. In practice that means EU, US, and APAC users all resolve locally — a detail we check explicitly on /benchmarks because "global" claims often hide thin Asian or South American coverage, which is not the case here.

Reliability terms are unusually strong: NS1 Connect commits to a 100% DNS uptime SLA on resolution. Availability is protected by the anycast distribution itself (queries land at the nearest healthy PoP), automated failover via health checks, and DDoS resiliency built into the authoritative network — volumetric DNS attacks are absorbed across the distributed footprint, and Standard adds an explicit DDoS + NXDOMAIN spike waiver. For customers who do not want shared infrastructure at all, the Premium-tier Dedicated DNS add-on gives a single-tenant redundant DNS layer, and a separate DNS-for-China service exists for mainland reachability.

Protocol coverage is complete for a modern authoritative service: A, AAAA (IPv6), CNAME, ALIAS (apex CNAME behaviour without the classic restrictions), NS, TXT and the usual record set, per the NS1 record-type documentation. IPv6 is a first-class citizen both for published records and for the platform's own DNS delivery. Cloud Sync keeps configurations mirrored to or from Amazon Route 53 and can back up zone data to Amazon S3, which is a practical escape hatch rather than a lock-in trap. Note the direction of travel since the IBM acquisition: the platform is now purchasable with AWS committed spend through the AWS Marketplace and bundled into IBM's support machinery, which cuts both ways (see below).

Where it falls short

Price is the obvious objection. $99/month buys you 2 health monitors and 1 filter chain — the exact configuration that keeps you away from the product's core value. By the time you have steering headroom you are at $349/month, which is an order of magnitude above commodity DNS. Overage at $75 per 10M-query block on Essentials punishes traffic growth that you did not plan for.

Complexity is the second. Filter chains, Pools, Regions, Metadata, and Pulsar form a real mental model; the trial's 20 monitors and 10 chains are enough to get lost in. Teams without a networking person on staff will underuse what they pay for. This is a platform designed by engineers for infrastructure teams, and it shows in both the good and the bad sense.

Third, the IBM ownership introduces uncertainty we cannot fully price. The product has kept its identity since the March 2023 acquisition, but IBM's portfolio rhythms, support tiers (IBM Standard Support on the store listing), and promotional pricing churn (time-boxed discounts, renewal exclusions) are not what long-time NS1 customers signed up for in 2013. The publicly quoted customer figures around the acquisition also conflict — the same June 2023 press release states both "more than 4,300 customers" and "more than 850 customers", so we treat customer counts as unverified and quote none here.

Finally, there is no self-serve path to secondary DNS or the dedicated network — both are sales conversations on the Premium tier, and Premium pricing is unpublished. Enterprise procurement friction is real.

Who should pick this

We would pick NS1 Connect when DNS is a revenue-critical control plane: multi-CDN steering across 20+ providers (the GlobalDots case study routes across 30+ CDNs), global server load balancing across clouds, or latency-sensitive delivery where per-user routing decisions pay for themselves. The 100% SLA, the depth of the filter-chain model, and the neutrality of the platform (it is tied to no single cloud or CDN) are the reasons enterprises standardize on it. Regulated industries that need a dedicated, single-tenant DNS layer should shortlist it too.

We would not pick it for a single-region SaaS app, a brochure site, or a startup watching spend. Cloudflare, Route 53, or a European DNS provider will handle basic authoritative DNS with failover for a small fraction of $349/month. Likewise, if you want DNS bundled into a broader edge/CDN contract, buying steering separately may not be worth the integration work.

Key takeaways

• Managed authoritative DNS with arguably the most capable traffic steering on the market — filter chains, health checks, real-user data via Pulsar.
• 26 anycast PoPs on six continents with EU, US, and APAC coverage confirmed by published location lists; 100% DNS uptime SLA.
• Real pricing starts at $99/month (Essentials), but steering is capped at one filter chain there; the tier that makes the product useful is Standard at $349/month.
• No perpetual free tier — a 30-day trial with generous limits is the only free entry; overage runs at $75 per 10M-query block on Essentials.
• API-first with Terraform support and Route 53/S3 Cloud Sync; overkill for single-origin sites and simple DNS needs.
• IBM ownership since March 2023 brings enterprise muscle and some portfolio uncertainty; conflicting customer counts mean we treat popularity claims cautiously.

Sources

• https://www.ibm.com/products/ns1-connect/pricing
• https://www.ibm.com/products/ns1-connect/features
• https://www.ibm.com/store/en/us/products/EIDF9I49
• https://ns1.com/anycasted-network
• https://ns1.com/about
• https://ns1.com/platform
• https://help.ns1.com/hc/en-us/articles/360022091074-About-DNS-record-types
• https://pitchbook.com/profiles/company/92327-23
• https://globenewswire.com/news-release/2023/06/20/2691197/0/en/NS1-Celebrates-10-Years-as-Leading-Premium-DNS-Provider.html