Tag Archives: Anycast

.FI, .IE and .SI Sign Up To Nic.at’s RcodeZero DNS Anycast Technology

nic.at announced their sister company, ipcom, has signed up 3 more ccTLDs to their anycast network technology RcodeZero DNS taking the total of TLDs relying on the technology to at least 19. While the Slovenian Registry (ARNES) has been using RcodeZero for many years for their .si, they recently extended their contract. But both the Finnish (TRAFICOM) and Irish (IE Domain Registry) registries have recently signed up and implemented RcodeZero as their secondary DNS provider to strengthen their DNS infrastructure for the first time.

Citing the network’s reliability and performance, TRAFICOM uses the secondary anycast service for their half million domain names in the Finnish country code top-level domain (ccTLD).

“Traficom selects its DNS partners based on very high quality and security standards, and ipcom fulfills them. During these challenging times this is very important”, explains Juhani Juselius, Chief Specialist.

The Irish ccTLD .ie also recently signed up for the secondary anycast network RcodeZero DNS to ensure permanent availability at maximum speed for their 300,000 domains.

In addition to the new ccTLD customers, .si (ARNES) – a long term customer for many years – has also renewed their contract with ipcom.

“With the Anycast service provided by RcodeZero DNS we can increase stability and redundancy for our .si TLD DNS,” said Benjamin Zwitting, Chief Technical Officer at ARNES, explaining why they decided to continue their partnership with RcodeZero DNS.

Naturally nic.at was delighted their sister company was able to gain two new clients and add another.

“Gaining more and more European TLDs proves that we are an important anycast provider within the community,” said a very happy Richard Wein, CEO of nic.at and ipcom. “Our flexibility towards customer needs, our personal support provided by long term employees and our location in the heart of Europe, positions us as attractive provider for competitive anycast solutions. We are proud to deliver high levels of reliability, performance and maximum protection for a registry’s DNS infrastructure.”

Any why use a service such as ipcom’s RcodeZero DNS anycast technology? In their announcement, nic.at says there are benefits that can be achieved by using at least one additional secondary anycast provider. With over 30 years of experience as the .at registry, ipcom has expert knowledge that feeds directly into our anycast product development and can respond very quickly and flexibly. More than 19 registries (like .nl, .pt, .eu), with more than 15 million domains under management, rely on RcodeZero DNS. External name service monitoring proves that the RcodeZero DNS network with more than 20 nodes (for TLDs) is one of the most reliable anycast services and a trusted global provider – the perfect partner for everybody that is continuously striving for highest optimisation of its own DNS infrastructure to guarantee the highest security standards.

More information: www.rcodezero.at or by e-mail rcodezero@ipcom.at

Austrian Registry nic.at Injects Humour Into Their Anycast Service

nicat AustriaWith the 2018 Domain Pulse set for 22 and 23 February in Munich, Domain Pulse recalled a video released by the Austrian ccTLD registry nic.at during the 2017 Domain Pulse last year to promote RcodeZero Secondary. That we forgot to promote.

RcodeZero Secondary is a product of IPCom, a subsidiary of nic.at. The RcodeZero Anycast network has been developed by nic.at’s R&D department and has been successfully in use for the .at zone. External name service monitoring by RIPE NCC proves that .at is one of the most reliable top level domains.

So the video was released in the early days of the Trump presidency and is a humorous look at RcodeZero Secondary. Warning. Trump fans should stay away!

And don’t forget. The 2018 Domain Pulse is happening soon at BMW Welt in Munich.

Registry Consolidation Continues as SIDN and Uniregistry Choose CIRA to Enhance DNS Security and Performance

Canadian Internet Registration Authority CIRA logoThe top level domain business continues to consolidate as registry operators look for partners to provide services rather than provide bespoke services every time. One of those registries that has recently been aggressive in seeking partners is CIRA, the registry operator for the Canadian ccTLD, who this week announced Uniregistry and SIDN have signed on to receive CIRA’s D-Zone DNS services for their TLDs.

Both partnerships were announced at the ICANN public meeting currently underway in Abu Dhabi and follows the announcement in February of two other joint ventures with the New Zealand and Portuguese ccTLD registries, InternetNZ and Associação DNS.PT, to deliver Anycast DNS services.

SIDN who manages the .nl country code top level domain (ccTLD) for the Netherlands, with more than 5.7 million domains under management, has itself been branching into other services. Speaking at the Domain Pulse conference in Vienna earlier this year SIDN’s Michiel Henneke said the registry has been experimenting with opportunities in similar areas.

“DNS is required for e-billing so SIDN became a co-creator of a DNS billing service in the Netherlands, but there are few other markets that are as attractive when it comes to revenue as domain names and the e-billing service is just a small part of revenue. We’ve also taken over an e-identity company with 12 million users, so we believe this will be a significant contributor to future revenue.”

Uniregistry, the other partner, operates .ky, the Cayman Islands ccTLD, along with 25 new generic top level in domains (gTLDs) in the global marketplace, including .link, .game, .mom and .photo.

The CIRA D-Zone Anycast DNS that the registries have signed up to use is built for resilience with a strong footprint at each node across a global, well-peered network that is recognized as best-in-class by some of the most discriminating buyers in the industry.

CIRA’s solution started with the needs of the .CA TLD at its heart, and is now finding great partners around the world who are committed to building a better internet for their users.

Establishing one or more secondary DNS footprints is considered an internet infrastructure best-practice that can help to mitigate the risks posed by DDoS that increasingly focus on DNS providers, where they can do the most damage. The DNS is fundamental to ensuring that websites, email, and web applications remain online and optimized for performance.

CIRA Announces New Ventures With .NZ And .PT To Deliver Anycast DNS Services As ccTLD Registries Look For New Opportunities

The Canadian ccTLD manager has announced two joint ventures this week with New Zealand and Portugal’s ccTLD registries to deliver Anycast DNS services.

The joint venture with New Zealand’s ccTLD augments .nz’s DNS infrastructure with a global network of nodes and peering to over 2,300 networks. As part of this deal, CIRA and NZRS will also be working together to build a new Pacific node for CIRA’s Anycast cloud.

“In selecting DNS hosting providers, NZRS looks for providers with deep DNS expertise who are committed to building a world class network and can provide a global reach for the .nz TLD,” said Jay Daley, CEO at NZRS Ltd. “In CIRA we see an organisation that not only amply demonstrated this but also shares our vision of building a better Internet.”

For the Portuguese ccTLD, CIRA’s D-Zone Anycast DNS instantly augments .pt’s DNS architecture, adding new global nodes and comprehensive global peering with over 2,300 networks.

CIRA’s D-Zone for TLDs service offers advanced query monitoring and reporting that enables ccTLDs to access packet capture (PCAP) data for expanded analysis and R&D projects.

D-Zone was built to sustain the performance and resiliency standards of the .CA domain name space, and as such is well-suited for modern ccTLD and gTLD businesses.

“The ccTLD community, and in particular .PT, is driven by a common objective of improving the global Internet and ensuring the safety and security of the global domain name system,” said Luisa Gueifão, Chair of the board of directors at Associação DNS.PT. “This partnership with CIRA give us an excellent tool to contribute to respond to new global cybersecurity threats, scaling our DNS architecture to meet the needs of a growing global domain name.”

These announcements follow news two weeks from DENIC the .de registry, that EURid was now its largest customer for the shared use of its global anycast mesh. DENIC now provides DNS slave services covering some 6.5m domains for seven TLD clients, in addition to running its own .de nameservice for more than 16.1m DUM, this way increasing its contribution for the security and stability of the Internet as a whole.

And they follow concerns by a number of ccTLD managers of where their next growth is to come from, a topic of discussion at the Domain Pulse conference in Vienna in February. Domain name registration growth has been fairly static for a few years now, as outlined in a CENTR report presented at the conference. So some country code top level domain registries are looking for new business opportunities outside their own market. SIDN, the .nl registry, has expanded by co-creating a DNS billing service in the Netherlands and taking over an e-identity company with 12 million users. Others, such as the Austrian ccTLD registry nic.at, have set up as new generic Top Level Domain registries

DENIC Doubles Provision Of Secondary Anycast Services Through .EU Contract

At the recent Domain Pulse conference in Vienna, there were discussions on how domain name registration growth rates for ccTLDs has been rather stagnant for a few years. One of the issues raised was what opportunities were there for ccTLD registries to look outside their own market for business opportunities.

SIDN, the .nl registry, has expanded by co-creating a DNS billing service in the Netherlands and taking over an e-identity company with 12 million users. Others, such as the Austrian country code Top Level Domain registry nic.at, have set up as new generic Top Level Domain registries.

And DENIC, the German ccTLD manager, has also been expanding. This week the .de registry announced it has won the contract to provide shared use of its global anycast mesh for the .eu and Cyrillic script .ею (xn--e1a4c) TLDs. DENIC now provides DNS slave services covering some 6.5m domains for seven TLD clients, in addition to running its own .de nameservice for more than 16.1m domains under management (DUM). Providing the service for EURid more than doubles the provision of this service to other TLDs and increases its contribution to the security and stability of the internet as a whole. The provision of the services to EURid is to date DENIC’s largest customer.

The improved network performance achieved by anycast routing eventually benefits every user of the Internet: via reduced processing times of DNS queries, multiplied back-up capacities to deal with load peaks, and enhanced resilience for optimum DDoS mitigation.

Third-party TLD operators running ccTLDs, gTLDs or Brand TLDs can benefit from DENIC’s DNS anycast slave services since 2010, under a cost-sharing scheme, using either the full set of DENIC’s authoritative global name servers, as a primary service, or picking dedicated ones as a supplement to their own network, in order to enlarge its footprint, resilience, and robustness. Growing numbers of customers and DUM also result in economies of scale for all connected TLD users which makes the shared use of DENIC’s network even more attractive.

Next to providing global anycast network presence, DENIC’s DNS slave service includes 24/7 monitoring and support as well as customised web APIs for advanced monitoring and statistics to meet clients’ operational needs.

Presently, the shared global anycast mesh run by DENIC includes 12 locations spread across the EMEA region (Amsterdam, Berlin, Frankfurt am Main, Moscow, Stockholm, Vienna), Asia Pacific (Beijing, Hong Kong, Seoul) and the Americas (Los Angeles, Miami, São Paulo). These locations are pooled in one IPv6 and two IPv4 anycast clouds, respectively.

Sited close to leading Internet exchange points, all network locations use high bandwidths, support IPv6 and are fully DNSSEC-enabled.