All validations are complete and updated .nz zones have been pushed. Thank you for your patience.
Posted Jun 01, 2023 - 19:17 NZST
We're extending our maintenance window for .nz zone generation to ensure thorough validation.
All checks are successful so far. This is a precautionary step to guarantee system integrity and reliability. We will update you once we've completed our validations and re-enabled the zone push process.
Thank you for your patience and understanding.
Posted Jun 01, 2023 - 17:30 NZST
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Jun 01, 2023 - 15:30 NZST
Following the recent DNSSEC chain validation incident and to ensure the integrity of our final DNSSEC updates to complete the DNSSEC key rollover in the .nz zone, we've decided to manually validate them.
This validation requires the temporary postponement of zone pushes during a window between 3:30pm to 5:30pm tonight, 1 June NZST. For reference, this maintenance should have no impact on recursive name server operations.
After the incident, we enacted several preventive measures. The DNSSEC key rollover process was temporarily halted, which allowed us to carefully analyse the situation and allocate sufficient time for the expiry of any mismatched records.
While these measures were necessary, they have increased the size of our DNS responses for a sustained period, creating a higher likelihood of technical issues. To reduce this risk, we're now initiating the completion of the key rollover process, which includes the removal of outdated keys.
We understand that this may impact your operations, and we appreciate your understanding as we take these steps to maintain the stability and security of the system.
Posted Jun 01, 2023 - 14:37 NZST
This scheduled maintenance affected: IRS Production (Zone Publish).