1. AM TLD Governance The role of ITC/AMNIC

2. AMNIC public services DNS Whois WWW Other services – e-mail, NTP, cDNS, RIPE Atlas Database - behind of scene

3. DNS Zone file management Slaves – diversity, reliability, security DNSSEC IANA

4. DNSSEC pros Authentication of origin Record's non-existence verification DANE/TLSA ! No MITM and cache poisoning anymore

5. DNSSEC cons Additional maintenance tasks Target for DDoS - larger responses, more CPU load and RAM usage Increased cost of errors

6. Back to other services Whois - standard and web interfaces Web interfaces to database updates NTP stratum 1 server - ntp.amnic.net member of pool.ntp.org cDNS - an instance of anycast cloud E-mail - other way to communicate

7. Hardware, connectivity, etc Two datacentres Two power sources Two upstream NSPs

8. Datacentres Server per service - virtualization Database streaming replication Total logging Backup to opposite DC Internal anycasting

9. Upstreams Connected to local exchanges Native IPv6 Multihomed, with large capacity

10. Power Good UPS systems Reliable switching between sources

11. Disaster recovery Recovery from backup Migration to alive database Migration to alive datacentre

12. What to improve Power generator system in main DC Paid escrow service out of country Global anycasting of DNS

13. Questions? Suggestions ? Hrant Dadivanyan at ran@psg.com