This application discloses a service resource scheduling method and apparatus, and relates to the field of information security technologies, to resolve a problem that a legitimate user in attack traffic cannot normally use a service of a tenant or an access speed becomes slow when a hacker attack occurs. The method includes: receiving, by a domain name system server, a domain name resolution request sent by a first terminal, where the domain name resolution request includes a domain name; selecting, based on a terminal reputation value of the first terminal and an IP reputation value of each virtual IP address in an IP address resource pool, a virtual IP address from at least two virtual IP addresses included in the IP address resource pool; and sending a domain name resolution response to the first terminal, where the domain name resolution response carries the selected virtual IP address.