The domain name system (DNS) has a number of well known extensions that have been available or in some form of development for many years. These include TSIG (IETF RFC 2845), DNSSEC (IETF RFC 4033), dynamic update (IETF RFC 2136), notify (IETF RFC 1996) and incremental zone transfer (IETF RFC 1995). Support for AAAA resource records (RRs) is generally available, but packet transport over native IPv6 (IETF RFC 2460) generally less so. This living document attempts to enumerate the DNS providers who support one or more of these extensions, features or capabilities in production.
DNS security mechanisms such as TSIG and DNSSEC are two technologies, that of the initial writing of this document (January 2009) have seen limited deployment from the root on down. The primary motivator for this document spawns from some first-hand experience in trying to implement both TSIG and DNSSEC for a set of zones across multiple TLDs and name server operators. A source of operational difficulty is more likely to arise when interoperability between multiple providers is required as it was in my case. In a phrase, it might be easier said than done. The Internet industry has long organized interoperability events for the core protocols and implementations, but perhaps it is time to go up the stack and have provider bake-offs to help demonstrate interoperabilty among provisioning systems to better gauge how providers cooperate (or not) in the real world?
The editor of this document has a bit of history with the DNS and the DNS community, including having once worked for an organization who has as a core business a variety of DNS service offerings. He also has lots of friends who work at DNS providers that may or may not make this list. With that out of the way, the presence of, absence of or invalid entries that may suggest bias is unintentional. Lapses in detail are likely a display of the holes in the editor's knowledge and familiarity with what is out there. Because of this, the editor is going to largely rely on submissions from readers to help populate, update and improve the list content.
| Updated | Provider | TSIG | DNSSEC | IPv6 Transport | Dynamic Update | IXFR | NOTIFY | Notes |
| 2009-01-09 | DNS Park | Y | N | N | N | Y | Y | |
| 2009-01-10 | Dynect | Y | Y | N | Y | Y | Y | |
| 2009-01-11 | EP.NET | Y | Y | Y | N | Y | Y | Contact via email for info |
| 2009-01-10 | IKS GmbH Jena | Y | Y | Y | Y | Y | Y | |
| 2009-01-09 | Neustar UltraDNS | Y | Y | Y | N | Y | Y | DNSSEC currently only available on TLDs |
$Id: dsp-capability.html,v 1.4 2009/01/11 16:50:25 jtk Exp $