[afnog] IANA DNSSEC Testbed to be Decommissioned

[Joe Abley]

Colleagues,

ICANN has operated the IANA DNSSEC testbed, serving non-production,
signed versions of the root, ARPA, IN-ADDR.ARPA, IP6.ARPA, IRIS.ARPA,
URN.ARPA, and INT zones for several years. Following the recent
completion of DNSSEC deployment in the root zone, this testbed is
scheduled to be decommissioned.

For more details on the IANA DNSSEC testbed, see
<https://ns.iana.org/dnssec/>.

For more details on DNSSEC deployment in the Root Zone, see
<http://www.root-dnssec.org>.

At the time that the service is decommissioned, the nameserver bound
to NS.IANA.ORG (208.77.188.32, 2620:0:2d0:1::32) will be shut down
and DNS queries to NS.IANA.ORG will fail with ICMP type 3 code 3
(Destination Unreachable, Port Unreachable).

We suggest that anybody using the DNSSEC testbed for anything
resembling production services make plans to stop doing so at their
earliest convenience.

ICANN would like to thank Packet Clearing House (PCH) and Dun.com
DynTLD for their support and generous donation of global DNS resources
to the IANA DNSSEC testbed.

DRAFT TIMELINE

 Wed 2010-08-03  First public notice (this message)
 Wed 2010-08-25  Second public notice (reminder)
 Wed 2010-09-01  IANA DNSSEC Testbed is shut down
 Wed 2010-09-01  Third public notice (confirming work complete)

Regards,


Joe Abley
Director DNS Operations, ICANN