- dns-wg - mailman.ripe.net

Seeking advice: API-friendly authoritative DNS stack for a domain reseller platform
by v0 01 Jan '26

01 Jan '26

Hi DNS WG, I’m looking for advice from operators who run authoritative DNS at scale. I’ve been building a domain reselling platform for ~2 years. Today, we manage customer DNS zones via the individual registrar/provider APIs (multiple upstreams). Operationally it’s painful: high/variable latency, inconsistent semantics, and unpredictable failures. Long-term, we’d like to operate our own authoritative DNS service (geo-distributed, e.g. ns1/ns2/ns3) and have customer domains delegate directly to our nameservers. The challenge: I’m struggling to find a “right-sized” authoritative DNS stack that is API-first (or at least automation-friendly) without having to build an entire DNS control plane from scratch. What we’re looking for: - Clean, automatable zone + record lifecycle (create/retrieve/update/delete) via API or well-supported automation interfaces - Preferably open standards / minimal vendor lock-in - DNSSEC support What we’ve considered so far: - BIND / NSD / Knot: solid, but “no native API” makes dynamic management feel awkward at scale or require custom workarounds (which often rely on consistency from provider-side which tends to cause issues) - PowerDNS: seems powerful, but may be heavier than we need (happy to be convinced otherwise) - Managed (Cloudflare / NS1 etc.): technically great, but cost/lock-in doesn’t fit our reseller model, also, we are fans of self-hosting in the Hetzner Cloud Questions for the group: 1. If you were starting this today, what stack (authoritative server + control/management layer) would you recommend for this kind of product? 2. Are there established open-source “control planes” or patterns people use (e.g., RFC2136 dynamic updates, catalog zones, GitOps-style zone generation, database-backed auth, etc.) that work well in practice? 3. Any pitfalls you’d warn about when turning authoritative DNS into a customer-facing service? Happy to share more details (expected zone counts, update rates, deployment model) if that helps. Thanks a lot in advance, Sebastiaan

1 0

Re: Welcome to the "dns-wg" mailing list
by James Garner 22 Dec '25

22 Dec '25

How do I fix a DNS record with the following error? The CNAME record for www.fbclexmo.com has incorrect value "ghs.googlehosted.com". Change this record." ________________________________ From: dns-wg-request(a)ripe.net <dns-wg-request(a)ripe.net> Sent: Monday, December 22, 2025 12:55 PM To: jdgarner2022(a)gmail.com <jdgarner2022(a)gmail.com> Subject: Welcome to the "dns-wg" mailing list Welcome to the "dns-wg" mailing list! To post to this list, send your message to: dns-wg(a)ripe.net You can unsubscribe or make adjustments to your options via email by sending a message to: dns-wg-request(a)ripe.net with the word 'help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You will need your password to change your options, but for security purposes, this password is not included here. If you have forgotten your password you will need to reset it via the web UI.

2 1

Multi-Stakeholder Forum on Internet Standards Deployment
by MARTIN Ruediger 27 Nov '25

27 Nov '25

Hi all, The European Commission is setting up a Multi-Stakeholder Forum on Internet Standards Deployment, looking into strengthening the deployment of existing standards and operational best practices in four areas: - IPv6 - modern E-mail communication standards - DNS security - Routing security & hygiene The initiative was presented during its conceptual phase at RIPE 90 in the cooperation working group. The idea is to bring together valuable deployment expertise to capture proven approaches in multi-stakeholder guidelines that support broad and coordinated adoption across sectors. Participation is open to anyone with relevant experience and interest. More information and how to join: https://digital-strategy.ec.europa.eu/en/news/european-commission-seeks-par… Some of you may have seen this elsewhere; sharing it here as well since it may be relevant to this list. Best, Rüdiger ---- Rüdiger MARTIN Internet Governance [cid:image001.jpg@01DC5FB5.A87017F0] European Commission DG Communications Networks, Content and Technology (CONNECT) L-51 DCS B-1049 Brussels/Belgium +32 2 298 82 50 Ruediger.MARTIN(a)ec.europa.eu<mailto:Ruediger.MARTIN@ec.europa.eu>

1 0

More Than 70% of DNS Root Queries Are Junk
by Hank Nussbacher 10 Nov '25

10 Nov '25

https://pulse.internetsociety.org/blog/more-than-70-of-dns-root-queries-are… Regards, Hank

19 33

Re: More Than 70% of DNS Root Queries Are Junk
by John Bond 05 Nov '25

05 Nov '25

Hello All, > Years ago, when I worked for ICANN doing DNS things, we created the xfr.lax.dns.icann.org and xfr.cjr.dns.icann.org > services in order to provide AXFR access to zones that we served on L-Root. I assume those are the ancestors of the > similarly-named services described at https://www.dns.icann.org/services/axfr/ I can confirm this is indeed the same service, reachable at xfr.dns.icann.org <http://xfr.dns.icann.org/>. However this service was not provisioned with RFC8806 in mind and is currently offered on a best effort basis. That said we would like add capacity as demand dictates > The public transparency idea was to make all the public zones we served available, not just the root zone, because why > wouldn't we, somebody might find them useful. Yes this is still the case. > I wonder if we could convince ICANN to add ZONEMD to Ill create a task to look at this however some zones are managed/owned by IANA, NRO or IETF so there maybe some layer 8 issues to navigate. Thanks john

1 0

FOSDEM 2026 DNS Devroom Call For Presentations
by Pieter Lexis 04 Nov '25

04 Nov '25

Hello DNS enthusiasts and other developers, After several earlier successful and packed DNS devrooms, we are happy to announce another half-day DNS devroom at FOSDEM 2026. As with the previous events, we hope to host talks anywhere from hardcore protocol stuff, to practical sessions for programmers that are not directly involved with DNS but may have to deal with DNS in their day to day coding or system administrators responsible for DNS infrastructure. We have been allotted a room on Sunday February 1st, the first half of the day, starting at 10:00 (CET). If you have something you’d like to share with your fellow developers, please head to the submission page at https://fosdem.org/submit . Examples of topics are measuring, monitoring, DNS libraries, anecdotes on how you’ve (ab)used the DNS, and group discussions of upcoming technologies. Here’s the 2025 schedule, for your inspiration: https://archive.fosdem.org/2025/schedule/track/dns/ . We expect to schedule 25 minutes per talk, including questions, but if you need more or less time, we can discuss this. The deadline for submissions is December 5th 23:59 CET (Brussels Time). Reach out to dns-devroom-manager(a)fosdem.org if you run into any trouble. See you there! Cheers, The FOSDEM 2026 DNS Devroom organizers P.S. This CfP also lives at https://blog.powerdns.com/2025/11/04/fosdem-2026-dns-devroom-call-for-prese… , any updates will be posted there.

1 0

Re: [Ext] Welcome to our new co-chair
by Ulrich Wisser 30 Oct '25

30 Oct '25

Thank you, for the warm welcome! I hope to get up-to-speed on all the policies and procedures soon to be able to help out at least a little bit. Kind regards /Ulrich On 2025-10-24, 19:01, "Moritz Müller via dns-wg" <dns-wg(a)ripe.net <mailto:dns-wg@ripe.net>> wrote: Hi all, We welcome Ulrich as our new co-chair! Many thanks again to Willem for his great work. And thanks to the DNS-WG for expressing their support for either of the two candidates and joining our meeting at RIPE 91. Cheers, Moritz, on behalf of the current DNS-WG co-chairs (Yevheniya and me)

1 0

Magic line of 2000 root servers was reached!
by Marco Davids (SIDN) 30 Oct '25

30 Oct '25

Worth noting: As of tonight, the magic line of 2000 root servers has been crossed: https://root-servers.org Congrats y'all! -- Marco Davids Research Engineer SIDN | Meander 501 | 6825 MD | Postbus 5022 | 6802 EA | ARNHEM T +31 (0)26 352 55 00 | www.sidnlabs.nl | X/Twitter: @marcodavids https://ipv6.camp/@marcodavids | Matrix: @marco:sidnlabs.nl Nostr: 11ed01ff277d94705c2931867b8d900d8bacce6f27aaf7440ce98bb50e02fb34

1 0

Welcome to our new co-chair
by Moritz Müller 24 Oct '25

24 Oct '25

Hi all, We welcome Ulrich as our new co-chair! Many thanks again to Willem for his great work. And thanks to the DNS-WG for expressing their support for either of the two candidates and joining our meeting at RIPE 91. Cheers, Moritz, on behalf of the current DNS-WG co-chairs (Yevheniya and me)

1 0

Co-chair selection process
by Moritz Müller 17 Oct '25

17 Oct '25

Dear DNS-WG, This is a friendly reminder that the DNS WG Chair Selection Process is indeed a selection process. As the serving DNS-WG co-chairs we will not count votes, but we will judge whether we have working group consensus for one of the candidates. We will base our judgement on the support expressed by members of the RIPE community. Please feel free to raise any questions or concerns here or by sending a direct mail to the DNS-WG co-chairs. Some more details on the process here: https://www.ripe.net/community/wg/active-wg/dns/dns-wg-chair-selection-proc… Cheers, Moritz, for the RIPE DNS working group co-chairs (Willem, Yevheniya and me)

3 3