ICANN compliant
-
Ipv4 and Ipv6 servers, anycast* available
-
IDN, DNSSEC, NSEC and NSEC3 enabled
-
Real-time DNS updates compliant with RFC 2136
-
DNS Services implemented using ISC BIND, compliant with RFC 1034, RFC 1035, RFC 1101, RFC 2181, RFC 2182, and RFC 3007
-
Uses open source software
Highly secured
-
Placed on different internet exchange point to ensure lower round-trip times and high quality lines
-
Security by limiting access to ranges on ISPs router using ACLs and firewall software (iptables) on host machines
-
Clustered servers with load balancing mechanism
Multi platform
-
At least two different hardware platforms (Intel/AMD, Power6/Power7, Sparc niagara)
-
Uses different operating systems (Linux, Solaris, FreeBSD/OpenBSD)
-
Runs different name server software (Bind, NSD)
-
Splits management and service through virtualization
* Anycast has the advantage of having multiple machines in multiple locations, which minimizes the possibility of denial of service (DOS) attacks. An Anycast server consists of multiple name servers placed at various different locations but uses one IP address to connect all these servers to the Internet. Since these different computers are located in different parts of the world and end-users using this service connect to the nearest server, an outage of one of the servers minimizes impact on the global access to the provided service. We will choose an Anycast provider that has a name server platform rolled out closest to the end-user but with an as broad as possible area covered.
