.microsoft

TLD SLA Compliance Monitoring

TLD SLA Compliance Metrics

Spec 10

DNS

Period Availability RTT Compliance RTT p50 RTT p95 Checks TSLAC
24h 100% 100% 19ms 92ms 64
7d 100% 100% 19ms 619ms 3312
30d 94.48% 94.48% 19ms 619ms 4415

RDAP

Period Availability RTT Compliance RTT p50 RTT p95 Checks TSLAC
24h 100% 100% 271ms 325ms 4
7d 100% 100% 276ms 346ms 108
30d 100% 100% 281ms 366ms 188

EPP *

Period Availability RTT Compliance RTT p50 RTT p95 Checks TSLAC
24h 100% 100% 42ms 45ms 6
7d 100% 100% 43ms 47ms 114
30d 98.51% 98.51% 37ms 40ms 134

DNSSEC Validation Metrics

Registry Agreement Spec 6

DNSSEC is required by the Registry Agreement (Specification 6) but is not part of the Spec 10 SLA. We monitor DNSSEC validation independently.

Period Validation Rate RTT p50 RTT p95 Checks Status
24h 100% 38ms 102ms 10
7d 100% 37ms 108ms 214
30d 100% 38ms 107ms 301

Unlike Spec 10 services, DNSSEC has no formal availability SLA. Thresholds shown are operational guidelines.

Current Check Status

Reported by Any53 Probes
Type AF RTT Last Check Source Details Status TSLAC
DNS v4 1.3ms 7 hours, 50 minutes ago local NSID: u-ci-nominet1.uschi1. OK
DNS v6 1.2ms 7 hours, 50 minutes ago local NSID: u-ci-nominet2.uschi1. OK
DNSSEC v4 38ms 4 hours, 59 minutes ago local Key: 55012 OK
DNSSEC v6 102ms 4 hours, 59 minutes ago local Key: 55012 OK
EPP * v4 40ms 2 minutes ago local Tudor EPP (Mock) v2.0 OK
EPP * v6 39ms 2 minutes ago local Tudor EPP (Mock) v2.0 OK
RDAP v4 277ms 1 hour, 22 minutes ago local TLS 1.3 OK
RDAP v6 273ms 1 hour, 22 minutes ago local TLS 1.3 OK

RDAP HTTPS Timing

273ms total
DNS Lookup
TCP Connect
83ms
TLS Handshake
92ms
Time to First Byte
272ms

TLS 1.3 / TLS_AES_128_GCM_SHA256

Nameservers

16 IPs tested
Hostname IP Address AF Status
dns1.nic.microsoft 213.248.219.132 v4
dns1.nic.microsoft 2a01:618:403::132 v6
dns2.nic.microsoft 103.49.83.132 v4
dns2.nic.microsoft 2401:fd80:403::132 v6
dns3.nic.microsoft 213.248.223.132 v4
dns3.nic.microsoft 2a01:618:407::132 v6
dns4.nic.microsoft 43.230.51.132 v4
dns4.nic.microsoft 2401:fd80:407::132 v6
dnsa.nic.microsoft 156.154.100.3 v4
dnsa.nic.microsoft 2001:502:ad09::3 v6
dnsb.nic.microsoft 156.154.101.3 v4
dnsb.nic.microsoft 2001:502:2eda::3 v6
dnsc.nic.microsoft 156.154.102.3 v4
dnsc.nic.microsoft 2610:a1:1009::3 v6
dnsd.nic.microsoft 156.154.103.3 v4
dnsd.nic.microsoft 2610:a1:1010::3 v6

Per ICANN Spec 10, we test all delegated nameserver IPs independently.

Test With Your Computer

DNS

dig @dns1.nic.microsoft microsoft. SOA +dnssec +nsid Query SOA with DNSSEC validation and NSID
drill -D microsoft. SOA @dns1.nic.microsoft Alternative using drill with DNSSEC trace

RDAP

curl -sS "https://rdap.nominet.uk/microsoft/domain/nic.microsoft" | jq . Fetch RDAP JSON (positive lookup)
curl -I -sS "https://rdap.nominet.uk/microsoft/domain/nic.microsoft" Headers only (check TLS, timing)
Open in Browser View RDAP response directly

Registry Information

Active
TLD .microsoft
Operator Microsoft Corporation
RDAP Server https://rdap.nominet.uk/microsoft/ RDAP Client

ICANN SLA Requirements

Per ICANN Registry Agreement Specification 10:

DNS SLA UDP RTT ≤ 500ms for 95% of queries. Availability: 99% (max 432 min/month downtime).
RDAP SLA RTT ≤ 4000ms for 95% of queries. Availability: 98% (max 864 min/month downtime).
EPP SLA RTT ≤ 4000ms for 95% of commands (Spec 10 §5). Availability: 98% (max 864 min/month downtime). (Demo mode)

API Access

JSON API

Access .microsoft compliance metrics programmatically via our REST API.

Quick Start

GET /any53/api/v1/compliance/microsoft/
curl -H "X-API-Key: ${YOUR_API_KEY}" \
  "https://www.any53.com/any53/api/v1/compliance/microsoft/"

Example Response

{
  "tld": "microsoft",
  "display_name": ".microsoft",
  "operator": "Microsoft Corporation",
  "updated_at": "2026-01-31T12:00:00Z",
  "dns": {
    "availability_24h": 99.99,
    "rtt_p50_ms": 12,
    "rtt_p95_ms": 42,
    "sla_threshold_ms": 500
  },
  "rdds": {
    "protocol": "RDAP",
    "availability_24h": 99.95,
    "rtt_p50_ms": 180,
    "rtt_p95_ms": 412,
    "sla_threshold_ms": 4000
  },
  "servers": {
    "rdap_url": "https://rdap.nominet.uk/microsoft/"
  },
  "spec10_compliant": true
}

Generate API Key

Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).

Endpoints

Endpoint Description Tier
GET /compliance/ List all monitored TLDs All
GET /compliance/{tld}/ Current metrics for a TLD All
GET /compliance/{tld}/history/ Historical time-series data Organization
GET /compliance/{tld}/probes/ Per-probe breakdown Organization
POST /compliance/keys/ Generate a new API key No auth

Rate Limits

Tier Rate Limit Features
Anonymous 100/hour Current snapshot, hourly aggregates
Verified 600/hour Current snapshot, hourly aggregates
Organization 6000/hour Historical data, per-minute resolution, per-probe breakdown