TLD SLA Compliance Metrics
Spec 10DNS
| Period | Availability | RTT Compliance | RTT p50 | RTT p95 | Checks | TSLAC |
|---|---|---|---|---|---|---|
| 24h | 100% | 100% | 18ms | 52ms | 273 | |
| 7d | 95.65% | 95.65% | 17ms | 52ms | 1495 | |
| 30d | 99.25% | 99.25% | 17ms | 123ms | 8645 |
DNSSEC Validation Metrics
Registry Agreement Spec 6DNSSEC is required by the Registry Agreement (Specification 6) but is not part of the Spec 10 SLA. We monitor DNSSEC validation independently.
| Period | Validation Rate | RTT p50 | RTT p95 | Checks | Status |
|---|---|---|---|---|---|
| 24h | 100% | 18ms | 18ms | 18 | |
| 7d | 94.12% | 16ms | 318ms | 102 | |
| 30d | 99.01% | 17ms | 72ms | 604 |
Unlike Spec 10 services, DNSSEC has no formal availability SLA. Thresholds shown are operational guidelines.
Current Check Status
Reported by Any53 Probes| Type | AF | RTT | Last Check | Source | Details | Status | TSLAC |
|---|---|---|---|---|---|---|---|
DNS
|
v4 | 47ms | 42 minutes ago | local | NSID: M-SFO-4 | OK | |
DNS
|
v6 | 45ms | 203 days, 7 hours ago | local | NSID: M-SFO-4 | OK | |
DNSSEC
|
v4 | 18ms | 1 hour, 52 minutes ago | local | Key: 20326 | OK | |
DNSSEC
|
v6 | 18ms | 1 hour, 52 minutes ago | local | Key: 20326 | OK |
Root Server Details
13 Root ServersThe 13 root servers operated by 12 organizations form the foundation of the DNS hierarchy. We test each server independently over both IPv4 and IPv6.
| Server | Operator | IPv4 RTT | IPv6 RTT | IPv4 NSID | IPv6 NSID | Anchor | Status |
|---|---|---|---|---|---|---|---|
a.root-servers.net |
Verisign | 18ms | — |
a.r.usnyc-2a
|
— | ||
b.root-servers.net |
USC-ISI | 19ms | — |
b3-iad
|
— | ||
c.root-servers.net |
Cogent | 2.9ms | — |
ord1a.c.root-server…
|
— | ||
d.root-servers.net |
UMD | 1.3ms | — |
chil8.droot.maxgiga…
|
— | ||
e.root-servers.net |
NASA | 1.4ms | — |
p03.ord.eroot
|
— | ||
f.root-servers.net |
ISC | 1.6ms | — |
ord2f.f.root-server…
|
— | ||
g.root-servers.net |
DISA | 20ms | — |
groot-con1-1
|
— | ||
h.root-servers.net |
US Army | 24ms | — |
001.den.h.root-serv…
|
— | ||
i.root-servers.net |
Netnod | 49ms | — |
s1.mnp
|
— | ||
j.root-servers.net |
Verisign | 0.59ms | — |
k.r.elord1.uschi-0
|
— | ||
k.root-servers.net |
RIPE NCC | 33ms | — |
ns2.us-mia.k.ripe.n…
|
— | ||
l.root-servers.net |
ICANN | 22ms | — |
us-rtv-aa
|
— | ||
m.root-servers.net |
WIDE | 47ms | — |
M-SFO-4
|
— |
NSID (Name Server Identifier) helps identify which anycast instance responded. Anchor validation confirms the DNSSEC root trust anchor matches across address families.
Probe-to-Server RTT Matrix
1 probes × 13 serversMost recent RTT measurements from each Any53 probe to all 13 root servers. This level of per-probe detail is available for all monitored TLDs on paid plans.
| Probe | Time | A | B | C | D | E | F | G | H | I | J | K | L | M |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
localhost1
|
11:21:53 | 18 — | 19 — | 2.9 — | 1.3 — | 1.4 — | 1.6 — | 20 — | 24 — | 49 — | 0.59 — | 33 — | 22 — | 47 — |
Top number is IPv4, bottom is IPv6. RTT in milliseconds. ≤100ms ≤300ms >300ms
Test With Your Computer
DNS
dig @a.root-servers.net root. SOA +dnssec +nsid
Query SOA with DNSSEC validation and NSID
drill -D root. SOA @a.root-servers.net
Alternative using drill with DNSSEC trace
Registry Information
ActiveICANN SLA Requirements
Per ICANN Registry Agreement Specification 10:
API Access
JSON APIAccess Root Zone compliance metrics programmatically via our REST API.
Quick Start
/any53/api/v1/compliance/root/
curl -H "X-API-Key: ${YOUR_API_KEY}" \
"https://www.any53.com/any53/api/v1/compliance/root/"
Example Response
{
"tld": "root",
"display_name": "Root Zone",
"operator": "Root Server System",
"updated_at": "2026-01-31T12:00:00Z",
"dns": {
"availability_24h": 99.99,
"rtt_p50_ms": 12,
"rtt_p95_ms": 42,
"sla_threshold_ms": 500
},
"spec10_compliant": true
}
Generate API Key
Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).
Endpoints
| Endpoint | Description | Tier |
|---|---|---|
GET /compliance/ |
List all monitored TLDs | All |
GET /compliance/{tld}/ |
Current metrics for a TLD | All |
GET /compliance/{tld}/history/ |
Historical time-series data | Organization |
GET /compliance/{tld}/probes/ |
Per-probe breakdown | Organization |
POST /compliance/keys/ |
Generate a new API key | No auth |
Rate Limits
| Tier | Rate Limit | Features |
|---|---|---|
| Anonymous | 100/hour | Current snapshot, hourly aggregates |
| Verified | 600/hour | Current snapshot, hourly aggregates |
| Organization | 6000/hour | Historical data, per-minute resolution, per-probe breakdown |