Recovery of a failed registry
A system, method, and computer-readable medium, is described that enables a registry recovery service to retrieve zone files from a target registry, archive the zone files, publish the zone files to a managed DNS server, reconcile ownership of the zone files, and publish the zone files to a provisioning DNS server. The registry recovery service may also implement a WHOIS server for the zone and ownership information and may also implement zone specific features particular to the target registry's TLD. The registry recovery service may also enable DNSSEC extensions on the recovered registry DNS services.
1. A computer-implemented method of recovering a registry comprising:
receiving zone data for a zone from the registry;
archiving the zone data into a data repository;
publishing the zone data into a managed DNS service;
reconciling ownership of the zone data;
launching a provisioning DNS service for the zone; and
enabling DNS Security (DNSSEC) extensions on the zone by digitally signing the zone with a Zone Signing Key (ZSK).
2. The method of claim 1 , comprising:
implementing a WHOIS service; and
implementing services specific to the registry.
3. The method of claim 1 , wherein the managed DNS service is configured to electronically accept zone updates from an authorized user via an electronic interface, wherein the authorized user is not a zone owner.
4. The method of claim 1 , wherein the reconciling ownership of the zone data is based on at least one of escrow data, WHOIS data, and survey data.
5. The method of claim 1 , wherein the provisioning DNS service is configured to electronically accept zone updates from a zone owner via an electronic interface.
6. The method of claim 1 , wherein the ownership of the zone
data is reconciled by:
receiving from registrars claimed ownership information;
resolving conflicts of ownership based on a predetermined conflict resolution process; and
assigning ownership based on at least one of the predetermined conflict resolution process and claims of ownership.
7. The method of claim 1 , comprising:
updating a root zone server with a corresponding Delegator Signor (DS) key.
8. A system of recovering a registry comprising:
a non-transitory memory storing instructions; and
a processor executing the instructions to cause the system to perform a method comprising:
receiving zone data for a zone;
archiving the zone data into a data repository;
publishing the zone data into a managed DNS service;
reconciling ownership of the zone data;
launching a provisioning DNS service for the zone; and
enabling DNS Security (DNSSEC) extensions on the zone by digitally signing the zone with a Zone Signing Key (ZSK).
9. The system of claim 8 , comprising:
implementing a WHOIS service; and
implementing services specific to the registry.
10. The system of claim 8 , wherein the managed DNS service is configured to electronically accept zone updates from an authorized user via an electronic interface, wherein the authorized user is not a zone owner.
11. The system of claim 8 , wherein the reconciling ownership of the zone data is based on at least one of escrow data, WHOIS data, and survey data.
12. The system of claim 8 , wherein the provisioning DNS service is configured to electronically accept zone updates from a zone owner via an electronic interface.
13. The system of claim 8 , wherein the ownership of the zone data is reconciled by:
receiving from registrars claimed ownership information;
resolving conflicts of ownership based on a predetermined conflict resolution process; and
assigning ownership based on at least one of the predetermined conflict resolution process and claims of ownership.
14. The system of claim 8 , comprising:
updating a root zone server with a corresponding Delegator Signor (DS) key.
15. A non-transitory computer-readable storage medium containing instructions which, when executed on a processor, perform a method comprising:
receiving zone data for a zone from the registry;
archiving the zone data into a data repository;
publishing the zone data into a managed DNS service;
reconciling ownership of the zone data;
launching a provisioning DNS service for the zone: and
enabling DNS Security (DNSSEC) extensions on the zone by digitally signing the zone with a Zone Signing Key (ZSK).
16. The computer-readable medium of claim 15 , wherein the method
comprises:
implementing a WHOIS service; and
implementing services specific to the registry.
17. The computer-readable medium of claim 15 , wherein the managed DNS service is configured to electronically accept zone updates from an authorized user via an electronic interface, wherein the authorized user is not a zone owner.
18. The computer-readable medium of claim 15 , wherein the reconciling ownership of the zone data is based on at least one of escrow data, WHOIS data, and survey data.
19. The computer-readable medium of claim 15 , wherein the provisioning DNS service is configured to electronically accept zone updates from a zone owner via an electronic interface.
20. The computer-readable medium of claim 15 , wherein the
ownership of the zone data is reconciled by:
receiving from registrars claimed ownership information;
resolving conflicts of ownership based on a predetermined conflict resolution process; and
assigning ownership based on at least one of the predetermined conflict resolution process and claims of ownership.
21. The computer-readable medium of claim 15 , wherein the method comprises:
updating a root zone server with a corresponding Delegator Signor (DS) key.
22. A computer-implemented method of recovering a registry comprising:
receiving zone data and ownership information from the registry;
archiving the zone data and ownership information;
publishing the zone data into a provisioning DNS service; and
enabling DNSSEC extensions on a zone by digitally signing the zone with a ZSK and updating a root zone server with a corresponding DS key.
23. The method of claim 22 , comprising:
updating root zone servers with an ip address corresponding to the provisioned DNS service.
24. A non-transitory computer-readable storage medium containing instructions which, when executed on a processor, perform a method comprising:
receiving zone data and ownership information from the registry;
archiving the zone data and ownership information;
publishing the zone data into a provisioning DNS service;
enabling DNSSEC extensions on a zone by digitally signing the zone with a ZSK and updating a root zone server with a corresponding DS key.
25. The computer-readable medium of claim 24 , wherein the method comprises:
updating root zone servers with an ip address corresponding to the provisioned DNS service.
26. A system of recovering a registry comprising:
a non-transitory memory storing instructions; and
a processor executing the instructions to cause the system to perform a method comprising:
receiving zone data and ownership information from the registry;
archiving the zone data and ownership information;
publishing the zone data into a provisioning DNS service; and
enabling DNSSEC extensions on a zone by digitally signing the zone with a ZSK and updating a root zone server with a corresponding DS key.
27. The system of claim 26 , wherein the method comprises:
updating root zone servers with an ip address corresponding to the provisioned DNS service.