NZ domain name registrar supporting DNSSEC/IPV6?

Forums › New Zealand Broadband › NZ domain name registrar supporting DNSSEC/IPV6?

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#151526 28-Aug-2014 09:54

I'm looking for a .NZ registrar who supports DNSSEC and IPV6. Presently with Metaname but they are expensive and use Paypal as their payments provider, which incurs additional charges. For this reason I'm looking around.

Responses by PM also welcome.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

MackinNZ

450 posts

Ultimate Geek

Lifetime subscriber

#1117130 28-Aug-2014 10:32

Metaname expensive? $25 doesn't seem expensive to me.

You can avoid PayPal charges by using online banking.

Metaname's support is outstanding. You might not get that with cheaper hosts. You get what you pay for.

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1117145 28-Aug-2014 10:49

MackinNZ: Metaname expensive? $25 doesn't seem expensive to me.

You can avoid PayPal charges by using online banking.

My requirements are for instant domain name registration, not wait until a payment is processed via a bank.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

MackinNZ

450 posts

Ultimate Geek

Lifetime subscriber

#1117147 28-Aug-2014 10:51

With Metaname you can preload your account with credit and register at will until your credit is used up. Works for me.

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1117151 28-Aug-2014 10:53

MackinNZ: With Metaname you can preload your account with credit and register at will until your credit is used up. Works for me.

Good for you! Hopefully someone will post a response which is relevant to the original post question.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

charsleysa

597 posts

Ultimate Geek

#1117160 28-Aug-2014 11:07

Before you start moaning about how I haven't answered your question take a look at this link and be nicer to people.

http://dnc.org.nz/content/srs_registrar_list.html

Regards
Stefan Andres Charsley

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1117162 28-Aug-2014 11:16

I am already aware of the DNC list.

The question was very clear. I want responses to the question, not opinions about my existing provider or thread hijacks.

Now move along.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

charsleysa

597 posts

Ultimate Geek

#1117164 28-Aug-2014 11:23

That list contains all the authorised .NZ registrars.
That list also contains columns showing you which of those registrars support DNSSEC and/or IPv6.

The question is answered.

Regards
Stefan Andres Charsley

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1117168 28-Aug-2014 11:32

charsleysa:
That list contains all the authorised .NZ registrars.
That list also contains columns showing you which of those registrars support DNSSEC and/or IPv6.

The question is answered.

If you don't like the question, you have the choice to move on and ignore it.

The list only lists 2 providers offering DNSSEC and IPV6. This is quite odd I think. Maybe it's out of date? For this reason I have decided to ask the masses. It could be there is now providers offering it (who are not listed as offering) or providers thinking of offering it and would welcome an opportunity to test it with a client who has used DNSSEC successfully.

DNSSEC is quite complex and has a lot of gotchas for the uninitiated. Because of this I doubt most providers intend to publicly offer it any time soon. But they may still be able to.

Like many things the best way to find out is to ask publicly.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

mattwnz

20164 posts

Uber Geek

#1117185 28-Aug-2014 12:01

The DNC list is upto date and correct with the current registrars. Otherwise you are better to use the cheapest registrar you can find and pay a DNS provider. Some if the cheap providers though have terrible support and some don't registrar in real time either.

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1117188 28-Aug-2014 12:06

mattwnz: The DNC list is upto date and correct with the current registrars. Otherwise you are better to use the cheapest registrar you can find and pay a DNS provider. Some if the cheap providers though have terrible support and some don't registrar in real time either.

Ah ok.

I have my own DNS servers. I'm after a provider who supports DNSSEC. One option I am considering is only moving my domains which I do not use DNSSEC.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

Zeon

3916 posts

Uber Geek

Trusted

#1117201 28-Aug-2014 12:44

I didn't realise that your registrar had to support DNSSEC too.... Probably why after signing my zones (admittedly I don't know much about this and just right click on them within Windows DNS and clicked sign :p ). They still don't appear valid. My registrar is Sitename.

Do we expect registrars to be supporting DNSSEC soon?

Speedtest 2019-10-14

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1117203 28-Aug-2014 12:49

Zeon: I didn't realise that your registrar had to support DNSSEC too.... Probably why after signing my zones (admittedly I don't know much about this and just right click on them within Windows DNS and clicked sign :p ). They still don't appear valid. My registrar is Sitename.

Do we expect registrars to be supporting DNSSEC soon?

Yes, DNSSEC has to be supported by the TLD (.nz is ok) and the registrar has to be able to publish the DS records. If you sign a zone but have not published DS records (or vis a vis) then you could have real issues. I suggest you immediately unsign the domains.

You must have something which looks like this when you run a 'whois' (note the sections in bold):

domain_delegaterequested: yes
domain_signed: yes
%

SNIP

%
ns_name_01: dns1.affordabledomains.co.nz
ns_name_02: dns2.affordabledomains.co.nz
ns_name_03: dns3.affordabledomains.co.nz
ns_name_04: dns4.affordabledomains.co.nz
%
ds_rdata_01: 48744 7 1 0208daa861d880eefbebe0d2dd1d95c973959958
ds_rdata_02: 48744 7 2 e1a37aeba25466c03f4728418fb30e5396be6810993f9e48d9a767b7b69f7393
%
% Users are advised that the following activities are strictly forbidden.
%
% Using multiple WHOIS queries, or using the output of multiple WHOIS
% queries in conjunction with any other facility or service, to enable
% or effect a download of part or all of the .nz Register.
%
% Using any information contained in the WHOIS query output to attempt a
% targeted contact campaign with any person, or any organisation, using any
% medium.
%
% A breach of these conditions will be treated as a breach of the .nz Policies
% and Procedures. Sanctions in line with those specified in the policies and
% procedures at www.dnc.org.nz may result from any breach.
%
% Copyright InternetNZ

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

Noodles

487 posts

Ultimate Geek

#1117218 28-Aug-2014 13:22

I don't think the registrar needs to support ipv6 if you're using your own DNS. As for DNSSEC, name.com support it, but price for .nz is a bit higher.

I had a hard time trying to find a registrar that supports DNSSEC. I ended up dumping my DNSSEC after moving my domains to Cloudflare for DNS (they don't support it yet).

MichaelNZ

1390 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1117220 28-Aug-2014 13:26

Noodles: I don't think the registrar needs to support ipv6 if you're using your own DNS.

Incorrect.

IPV6 glue records are separate from IPV4. Not all registrars accept IPV6 glue records.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers