TLD SLA Compliance Metrics
Spec 10DNS
| Period | Availability | RTT Compliance | RTT p50 | RTT p95 | Checks | TSLAC |
|---|---|---|---|---|---|---|
| 24h | 100% | 100% | 16ms | 46ms | 286 | |
| 7d | 100% | 100% | 16ms | 74ms | 1560 | |
| 30d | 100% | 100% | 17ms | 112ms | 5265 |
DNSSEC Validation Metrics
Registry Agreement Spec 6DNSSEC is required by the Registry Agreement (Specification 6) but is not part of the Spec 10 SLA. We monitor DNSSEC validation independently.
| Period | Validation Rate | RTT p50 | RTT p95 | Checks | Status |
|---|---|---|---|---|---|
| 24h | 100% | 18ms | 19ms | 22 | |
| 7d | 100% | 18ms | 20ms | 110 | |
| 30d | 68.18% | 18ms | 20ms | 352 |
Unlike Spec 10 services, DNSSEC has no formal availability SLA. Thresholds shown are operational guidelines.
Current Check Status
Reported by Any53 Probes| Type | AF | RTT | Last Check | Source | Details | Status | TSLAC |
|---|---|---|---|---|---|---|---|
DNS
|
v4 | 46ms | 24 minutes ago | local | NSID: M-SFO-3 | OK | |
DNS
|
v6 | 45ms | 158 days, 1 hour ago | local | NSID: M-SFO-4 | OK | |
DNSSEC
|
v4 | 18ms | 3 hours, 33 minutes ago | local | Key: 20326 | OK | |
DNSSEC
|
v6 | 20ms | 3 hours, 33 minutes ago | local | Key: 20326 | OK |
Root Server Details
13 Root ServersThe 13 root servers operated by 12 organizations form the foundation of the DNS hierarchy. We test each server independently over both IPv4 and IPv6.
| Server | Operator | IPv4 RTT | IPv6 RTT | IPv4 NSID | IPv6 NSID | Anchor | Status |
|---|---|---|---|---|---|---|---|
a.root-servers.net |
Verisign | 18ms | — |
a.r.usnyc-2c
|
— | ||
b.root-servers.net |
USC-ISI | 22ms | — |
b3-iad
|
— | ||
c.root-servers.net |
Cogent | 2.3ms | — |
ord1b.c.root-server…
|
— | ||
d.root-servers.net |
UMD | 1.3ms | — |
chil2.droot.maxgiga…
|
— | ||
e.root-servers.net |
NASA | 1.8ms | — |
p03.ord.eroot
|
— | ||
f.root-servers.net |
ISC | 1.7ms | — |
ord2f.f.root-server…
|
— | ||
g.root-servers.net |
DISA | 12ms | — |
groot-con1-1
|
— | ||
h.root-servers.net |
US Army | 22ms | — |
001.den.h.root-serv…
|
— | ||
i.root-servers.net |
Netnod | 25ms | — |
s1.mco
|
— | ||
j.root-servers.net |
Verisign | 0.67ms | — |
n.r.elord1.uschi-0
|
— | ||
k.root-servers.net |
RIPE NCC | 37ms | — |
ns3.us-mia.k.ripe.n…
|
— | ||
l.root-servers.net |
ICANN | 24ms | — |
us-rtv-aa
|
— | ||
m.root-servers.net |
WIDE | 46ms | — |
M-SFO-3
|
— |
NSID (Name Server Identifier) helps identify which anycast instance responded. Anchor validation confirms the DNSSEC root trust anchor matches across address families.
Probe-to-Server RTT Matrix
1 probes × 13 serversMost recent RTT measurements from each Any53 probe to all 13 root servers. This level of per-probe detail is available for all monitored TLDs on paid plans.
| Probe | Time | A | B | C | D | E | F | G | H | I | J | K | L | M |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
localhost1
|
05:21:53 | 18 — | 22 — | 2.3 — | 1.3 — | 1.8 — | 1.7 — | 12 — | 22 — | 25 — | 0.67 — | 37 — | 24 — | 46 — |
Top number is IPv4, bottom is IPv6. RTT in milliseconds. ≤100ms ≤300ms >300ms
Test With Your Computer
DNS
dig @a.root-servers.net root. SOA +dnssec +nsid
Query SOA with DNSSEC validation and NSID
drill -D root. SOA @a.root-servers.net
Alternative using drill with DNSSEC trace
Registry Information
ActiveICANN SLA Requirements
Per ICANN Registry Agreement Specification 10:
API Access
JSON APIAccess Root Zone compliance metrics programmatically via our REST API.
Quick Start
/any53/api/v1/compliance/root/
curl -H "X-API-Key: ${YOUR_API_KEY}" \
"https://www.any53.com/any53/api/v1/compliance/root/"
Example Response
{
"tld": "root",
"display_name": "Root Zone",
"operator": "Root Server System",
"updated_at": "2026-01-31T12:00:00Z",
"dns": {
"availability_24h": 99.99,
"rtt_p50_ms": 12,
"rtt_p95_ms": 42,
"sla_threshold_ms": 500
},
"spec10_compliant": true
}
Generate API Key
Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).
Endpoints
| Endpoint | Description | Tier |
|---|---|---|
GET /compliance/ |
List all monitored TLDs | All |
GET /compliance/{tld}/ |
Current metrics for a TLD | All |
GET /compliance/{tld}/history/ |
Historical time-series data | Organization |
GET /compliance/{tld}/probes/ |
Per-probe breakdown | Organization |
POST /compliance/keys/ |
Generate a new API key | No auth |
Rate Limits
| Tier | Rate Limit | Features |
|---|---|---|
| Anonymous | 100/hour | Current snapshot, hourly aggregates |
| Verified | 600/hour | Current snapshot, hourly aggregates |
| Organization | 6000/hour | Historical data, per-minute resolution, per-probe breakdown |