IE Domain Registry t/a .IE Annual Report 2021

6 10 10 1 1 1 3 1 2 1 3 12 11 30 2 1 1 1 Chart 2: Security, stability and resilience of the .ie global nameserver network The Domain Name System (DNS) infrastructure for .ie includes a network of nameserver locations around the globe, illustrated in Chart 2 below.. The lookup or resolution service for .ie domain queries is performed at all nameserver locations. A critical component of this nameserver infrastructure is the use of ‘Anycast’ load balancing technology provided to us by the secondary nameserver service providers. This ‘Anycast’ facility protects against a Denial of Service attack (DDoS attack) by allowing the geographical distribution of .ie domain lookup requests to any available DNS resolver for redundancy. This effectively localises the potential adverse effects of the DDoS attack, by preventing it spreading across the entire network. For the .ie namespace, this means increased system efficiency, faster response times, reduced potential for outages, and increased resilience against deliberate or malicious attacks. It is important to note that even if our physical locations, staff and primary nameserver were wiped out (an unlikely scenario) and no action was taken to invoke emergency plans (an even more unlikely scenario), then service to .ie domains would continue for a minimum of 30 days without any intervention. Obviously, new registrations, changes and deletions would not take place but crucially, existing domain holders’ websites and email would continue to function normally during this time, using the secondary nameserver locations around the world. The .ie Domain Name System (DNS) infrastructure explained Business and Market Review IE Domain Registry CLG t/a .IE / Annual Report & Review 2021 20 The number of nameserver locations .IE - Dublin, Ireland 2 a.ns.ie b.ns.ie Netnod 69 c.ns.ie d.ns.ie BT - Dublin Ireland 1 g.ns.ie Afnic - Paris Region, France 2 h.ns.ie IPCOM Rcodezero 24 i.ns.ie