When someone changes their authoritative name servers via their registrar, what process does the registrar go through to update the top-level domain (TLD) servers?


Historically the root zone manager has taken updates from registrars through an e-mail template system. If you were messing about with NetSol 10+ years ago you'd remember the e-mail templates.

As inherently stable and reliable as e-mail is, Verisign (NetSol at the time) came up with a new RZMS (Root Zone Management System) which is actually just a set of specifications for a web interface to the database. The interaction protocol is call the EPP system (Extensible Provisioning Protocol; RFCs 3730-3735). Apparently this system is used at least for .com, .org, and likely many others. The TLD manager also communicates the status of the TLD Zone back to ICANN so they have what is essentially a backup copy (ICANN claims it's for verification and authentication purposes; like they would know if something was wrong).

  • Oh, god, I remember spending weeks emailing back and forth trying to get Network Solutions to accept a PGP key so I could do some of the updates. – Ward Jan 24 '12 at 20:13
  • You've been led up the garden path by an edit by Peter Grace that botched the question. The questioner was originally asking about top-level domain registries and how registrars communicate domain registration changes to them, not about the root zone. – JdeBP Jan 24 '12 at 21:36
  • @JdeBP I answered the Question before the edit, but there is no "root zone", the root servers contain the TLDs (more or less... drastically simplified I know...) – Chris S Jan 24 '12 at 21:46
  • 1
    Who told you that complete rubbish? Of course there's a root zone. Anyone setting up their own root content DNS server can tell you this. Here's the InterNIC version of its zone file. The root is not a TLD, and the (diminutive) root content DNS servers only serve up delegations to TLDs, not the TLD data themselves. – JdeBP Jan 24 '12 at 22:41

A request is sent to the registry to change the authoritative name servers and the registry then pushes those changes to the root servers. The request is sent in real time, but it can vary by registry how quickly the root servers update.

Does that answer your question? Let us know if you need anything else.

  • 1
    Welcome to Server Fault! We generally like to dig into the technical details of these processes, so in that regard this is a bit lightweight. In any case we welcome your insight. – Chris S Jan 24 '12 at 19:44

Here's a layout of the process to become a registrar for .org (the .org registry is run by PIR):


And here are the requirements/business processes for Verisign-owned TLDs (.net, .com, and others)


It seems complex.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.