Domain Registrar kana DNS Provider Outage: Yakapera Domain Redemption Period, DNSSEC SERVFAIL Musungo, uye Emergency Nameserver Kutama¶

Kumuka kuti uwane kuti webhusaiti yako yekutanga webhusaiti, API endpoints (api.example.com), uye email yekambani (MX marekodhi eGoogle Workspace kana Microsoft 365) haasvikiki zvachose pasi rose (DNS_PROBE_FINISHED_NXDOMAIN kana SERVFAIL) idambudziko rakapera zvachose. Kusiyana neakapunzika sevha yewebhu inobata sevhisi imwe, Domain Name System (DNS) kana kutadza kunyoreswa kwedomasi kunobvisa masevhisi ese pasi pemudzi wako panguva imwe chete, kusanganisira Single Sign-On (SSO), masuo ekutsigira mutengi, uye maemail anouya echiitiko-mhinduro. Mukuita, kudzima kwepasi rose kunobva kune zvitatu zvakasiyana zvinokonzeresa: (1) iyo ** tsaona dura inopera ** apo kadhi rechikwereti pafaira rakapera uye munyori akabira yako. NS marekodhi anongedza kune peji rekupaka-pa-per-click 24 to 48 hours zuva chairo rekupera risati rasvika; (2) a ** DDoS kurwisa kana kudzora-ndege kubuda ** kune wako ane mvumo DNS mupi (Route 53, Cloudflare, GoDaddy, Namecheap, DNSimple, NS1); kana (3) a ** akatyoka DNSSEC (DS rekodhi) cheni yekuvimba ** panguva yekumhanyisa nameserver switch inokonzera kugadzirisa zvinogadzirisa (8.8.8.8, 1.1.1.1, ISP solvers) kudonhedza zana muzana yetraffic yako SERVFAIL. Kana munhu anorwisa akakanganisa zvitupa zvekunyoresa zvekunyoresa uye akatamisa kana kushandura domain yako zvine hutsinye, chinja ku domain name hijacking, yapera nguva DNS, uye webhusaiti kutora; kana chitupa chako cheTLS chapera kana kuputsika mushure mekunge DNS yapora, ona SSL/TLS chitupa chakapera mukugadzirwa, HSTS preload kukiya, uye nekukurumidzira kuvandudzwa uye Google Workspace kana Microsoft 365 custom domain admin lockout uye DNS verification. Kana kupera uku kuchidzima kutaurirana kwechipatara, 911/112 emergency dispatch routing, kana zvakakosha zveveruzhinji, fonera yako yemuno emergency emergency (911 muUnited States neCanada, 112 muEuropean Union, 999 muUnited Kingdom) kana bvunza dhairekitori redu re nhamba dze emergency.

Ita izvi ikozvino¶

1. ** Ongorora mumasekonzi gumi kana kutadza kuri Yakapera / Yakamiswa Domain (EPP Status), Anotenderwa DNS Provider Outage, kana a DNSSEC Kukundikana Kwekusimbisa**:
2. Mhanyai whois yourdomain.com | grep -iE "Status|Expiry|Name Server" uye dig +trace yourdomain.com.
3. Edza kana uchinzvenga DNSSEC kusimbiswa (+cd = Kutarisa Yakaremara) inoita kuti dura rako rigadzirise zvakare:

   dig @8.8.8.8 yourdomain.com A
   dig @8.8.8.8 yourdomain.com A +cd
   

   Kana murairo wekutanga uchidzoka status: SERVFAIL nepo wechipiri murairo (+cd) pakarepo anodzoka status: NOERROR nekero yeIP yeseva yako, **maseva ako eDNS HAASI pasi: yako DNSSEC (DS rekodhi kune registrar) yakaputsika **. Svetuka nekukurumidza kuChikamu 3 kudzima iyo stale DS rekodha pane yako registrar.
4. ** Kana nzvimbo yako yapera (Auto-Renew Grace Period kana Redemption Grace Period), pinda mune yako yazvino registrar nekukasira uye ubhadhe muripo wekuvandudza / kudzikinura; USAmirira kuti domain "idonhe" kuitira kuti ugokwanisa kuinyora zvakare zvakachipa **:
5. Munguva yekutanga ** 1 kusvika 45 mazuva ** mushure mekupera (Auto-Renew Grace Period), kuvandudza mune yako registrar dashboard inodzoreredza yako yepakutanga nameservers payakajairwa yekuvandudza mutengo ($10 to $30)
6. Munguva ye 30-mazuva Redemption Grace Period (RGP / redemptionPeriod), unofanira kubhadhara mari inosungirwa yekuregererwa ($80 to $250) kuburikidza nemunyori wako wazvino. Kana iwe ukamirira iyo domain kuti ipedze iyo ** 5-zuva Pending Delete** chikamu chekuchengetedza $100, otomatiki inodonha-inobata sniper bots (DropCatch, SnapNames, NameJet) ichabvuta yako domain mukati 5 milliseconds yekuburitsa uye kuitengesa kwezviuru zvemadhora.
7. ** Usambo shandura maNameservers ako (NS) kure neDNSSEC-inogonesa DNS mupi (seCloudflare, Route 53, kana Google Cloud DNS) pasina kubvisa iyo DS rekodha kune wako munyori kutanga **: Kana DNSSEC inogoneswa uye iwe unochinja yako NS marekodhi kune anonunura DNS mupi panguva yekudzima pasina kudzima mubereki DS (Delegation Signer) rekodhi mu .com / .org TLD zone kutanga, yega yega inogadzirisa inogadzirisa paPasi icharamba iyo itsva DNS mupi asina kusaina mhinduro senge cryptographic spoofing kurwisa (SERVFAIL)
8. **Kana wakavharirwa kunze kwekambani yako @yourdomain.com email nekuti yako domain MX marekodhi ari pasi, USADYA "Tumira password reset kodhi ku admin@yourdomain.com" pane yako registrar **: Ipo yako domain iri NS kana MX marekodhi ari kunze kwenyika, chero email yekusimbisa inotumirwa kune @yourdomain.com kubhowekana kana kunyangarika mumutsara. Shandisa yako registrar's SMS/Authenticator MFA, out-of-band backup email (@gmail.com / @proton.me), kana kuyerera kwekuzivikanwa kwefoni.
9. Mushure mekuvandudza dura rakapera, nemaoko simbisa kuti Registrar wako akadzoreredza yako yepakutanga Custom Nameservers (NS) pachinzvimbo chekusiya domain iripo sedoparking.com / renewyourname.net: Kana domain yapera, vanyoreri vanonyora pasi tsika yako NS marekodhi ane nameservers ekupaka (ns1.parklogic.com, dns1.name-services.com) Dzimwe nguva kubhadhara kuvandudza kunovandudza zuva rekupera kusvika gore rinouya uchisiya maservers ekupaka achishanda kudzamara iwe waachinja nemaoko.
10. ** Flush yepasirese yeruzhinji inodzokorora DNS cache (Google 8.8.8.8, Cloudflare 1.1.1.1, OpenDNS) wechipiri wako NS kana DS marekodhi anodzoreredzwa **: Panzvimbo pekumirira 24 kusvika 48 maawa kuti achengetedzwe NXDOMAIN kana kupaka-peji NS marekodhi ekupera basa, konzeresa nekukurumidza cache yepasi rose kuGoogle Public DNS (developers.google.com/speed/public-dns/cache) uye Cloudflare 1.1.1.1 (one.one.one.one/purge-cache/)

Muti wesarudzo: dura repasi rose kana DNS kudzima emergency triage¶

Shandisa iyi flowchart kunongedza iyo chaiyo layer yeDNS hierarchy (TLD Registry, Registrar EPP Status, DNSSEC DS Chain, kana Authoritative Nameserver) uko kugadzirisa kuri kutadza:

flowchart TD
    Start["Global Outage: Domain Web & Email Kutadza Kugadzirisa (NXDOMAIN / SERVFAIL)"] --> RunDiag["Mhanyai: whois domain.com AND dig @8.8.8.8 domain.com +cd"]

    RunDiag --> CheckCD{"Do dig @8.8.8.8 domain.com Inokundikana, Ichiri Kuwedzera +cd Inobudirira?"}

    CheckCD -->|"Hongu: Inoshanda ne +cd, Inokundikana Pasina +cd"| DnssecBreak["Yakaputsika DNSSEC Chain of Trust: Delete Stale DS Record paRegistrar OR Re-Sign Zone -> Flush 8.8.8.8 & 1.1.1.1"]

    CheckCD -->|"Kwete: Zvose Zvakakundikana kana Kudzorera IP yekupaka"| CheckWhois{"Ongorora WHOIS EPP Domain Status & Expiry Date"}

    CheckWhois -->|"Mamiriro: clientHold kana serverHold"| HoldState["Registrar / Registry Kumiswa: Zadzisa ICANN RAA Email Verification KANA Abuse/Billing Tiketi Pakarepo"]

    CheckWhois -->|"Zuva rekupera kwenguva (Status: autoRenewPeriod)"| GraceRenew["Zuva 1 kusvika 45 Kupera-Kupera: Bhadhara Standard Renewal muRegistrar Portal -> Simbisa Tsika NS Yadzoreredzwa"]

    CheckWhois -->|"Mamiriro: redemptionPeriod (RGP)"| RgpRestore["Zuva 45 kusvika 75 Post-Kupera: Vhura Urgent Registrar Tsigiro Tiketi / Bhadhara RGP Kudzoreredza Mari ($80-$250) Pakarepo"]

    CheckWhois -->|"Mamiriro: pendingDelete"| PendingDel["Yekupedzisira 5-Zuva Kukiya: Haikwanise Kuvandudzwa kuRegistrar -> Isa Maodha Emashure Pakati Pese Makuru Kudonhedza-Vanobata Iye zvino"]

    CheckWhois -->|"Mamiriro: ok / mutengiTransferProhibited UYE Kupera muRamangwana"| AuthDown["Domain Registration Hutano -> Authoritative DNS Provider Outage or Missing Zone"]

    AuthDown --> MigrateNS["Ngenisa Zone Faira (`BIND` / Terraform) kune Sekondari DNS Provider -> Bvisa DS Record kana DNSSEC Pa -> Gadziridza NS kuRegistrar"]

Chikamu chekutanga: Iyo ICANN Domain Expiration Lifecycle (Auto-Renew vs. Redemption vs. Pending Delete)¶

Kana generic Yepamusoro-Level Domain (gTLD zvakadai .com, .net, .org, .io, .ai, .co, .app, .dev) inopera nekuti kadhi rechikwereti rekuvandudza otomatiki rakatadza kana kadhi rezvemari rakadzimwa mushure mekunge mushandi aenda, dura rinopfuura nepakati pematanho mazhinji ehupenyu anotongwa ne ICANN's Expired Registration Recovery Policy (ERRP) uye zvibvumirano zve registry operator (Verisign nokuti .com/.net, PIR nokuti .org, Identity Digital)

Domain inofa sei uye nei ichienda kunze kwenyika PASI kana PAZuva 1 rekupera¶

+-------------------------------------------------------------------------+
| ICANN gTLD EXPIRATION TIMELINE (.com / .net / .org example)             |
|                                                                         |
| [Active Domain]                                                         |
|       |                                                                 |
|       v  (Expiration Date Reached: Day 0)                               |
| +---------------------------------------------------------------------+ |
| | STAGE 1: Auto-Renew Grace Period (Day 1 to Day 30-45)               | |
| | - EPP Status: ok or clientHold (Registrar swaps your NS to parking) | |
| | - Production Impact: 100% OFFLINE within 0 to 48 hours of expiry    | |
| | - Recovery: Log into registrar & pay normal renewal ($10-$30).      | |
| +---------------------------------------------------------------------+ |
|       |  (Registrar sends Delete command to Registry at Day 30-45)      |
|       v                                                                 |
| +---------------------------------------------------------------------+ |
| | STAGE 2: Redemption Grace Period [RGP] (Exactly 30 Calendar Days)   | |
| | - EPP Status: redemptionPeriod (Domain removed from TLD Root Zone)  | |
| | - Recovery: Still 100% guaranteed to original owner, MUST pay       | |
| |   Registry RGP Redemption Fee ($80-$250) + renewal via registrar.   | |
| +---------------------------------------------------------------------+ |
|       |  (30-Day RGP expires without redemption payment)                |
|       v                                                                 |
| +---------------------------------------------------------------------+ |
| | STAGE 3: Pending Delete (Exactly 5 Calendar Days)                   | |
| | - EPP Status: pendingDelete                                         | |
| | - Recovery: IMPOSSIBLE to renew or redeem at any price. Registry    | |
| |   rejects all registrar commands until public drop at Day 5 (~18:00 | |
| |   UTC for Verisign .com/.net).                                      | |
| +---------------------------------------------------------------------+ |
+-------------------------------------------------------------------------+

Enzanisa kodzero dzako chaidzo, mari, uye zviito zvekudzoreredza padanho rega rega rekupera, kusanganisira nyika-code Top-Level Domains (ccTLDs kufanana .uk, .de, .eu, .ca, .au), izvo kwete ** kwete ** kutevera ICANN gTLD mitemo:

Chikamu chechipiri: Nhanho-ne-nhanho kudzoreredza kweyakapera kana RedemptionPeriod domain¶

Tevedza iyi chaiyo kutevedzana kudzosa iyo yakapera nguva domain pamhepo munguva ipfupi inobvira:

Nhanho 1: Torazve kuwana kuRegistrar Account yako kana @yourdomain.com email yakafa¶

Heino yekare Catch-22 yenzvimbo yakapera nguva: - Nzvimbo yako (company.com) yakapera, saka MX zvinyorwa zve company.com akamira kugadzirisa. - Iwe unoedza kupinda mune yako domain registrar (GoDaddy, Namecheap, Cloudflare, Porkbun, Hover, Network Solutions, Gandi), uye munyori anoti: "Takatumira kodhi yekuongorora ine manhamba matanhatu ku admin@company.com." - Nokuti company.com yapera, iyo email haigone kusvika.

Maitiro ekubuda kunze kweiyo yapera-domain email loop nekukurumidza: 1. ** Usatore kana kushandura chero chinhu parizvino: tarisa kana iwe uchikwanisa kupenengura yenguva yekukurumidzira tsamba yekubata CHETE kana iyo domain isina kupera nguva (kana iyo domain pachayo yapera panguva yeTLD level, MX haigone kugadzirisa chero kupi kusvika yavandudzwa). 2. Shandisa iyo Registrar's "Yarasika Imeyili Kupinda / Domain Yapera" Akaundi Yekudzoreredza Chiteshi: - Vanenge vese ICANN-yakatenderwa maregistra inopa yakatsaurirwa foni kana hurumende-ID / corporate-incorporation-document verification workflow yakanangana nevatengi vane email yekupinda. @ iyo domain yakapera mukati meakaundi. - Iva nezvinhu zvitatu zvakagadzirira usati wafonera registrar rutsigiro: (a) iyo ** yekupedzisira mana manhamba ekiredhiti kadhi kana PayPal transaction ID yakashandiswa pane yakapfuura yekuvandudza invoice, (b) yako ** Registrar Account ID / PIN yeMutengi , uye © ** yehurumende mufananidzo ID + Zvinyorwa zveIncorporation / utility bill inofananidzwa neWHOISTech / Admin / Registrant) 3. ** Kana wangopinda mukati, nekukurumidza chinja yako Registrar Account email kero kune yekunze domain (@gmail.com, @proton.me, kana imwe nzvimbo yekukurumidzira yakaparadzana yaunayo)** uye gonesa **Hardware Security Key (FIDO2) ** kana ** TOTP Authenticator App ** MFA saka kupinda hakuna kunoenderana @company.com email zvakare.

Danho 2: Ita iyo Renewal kana RedemptionPeriod (RGP) Dzorera¶

1. Kana iyo domain iri muChikamu 1 (Auto-Renew Grace Period, Mazuva 1 kusvika 30/45):
2. Enda ku **Billing -> Renewals ** kana Domain List -> Expired Filter uye bhadhara invoice yekuvandudza.
3. ** Yakakosha Tarisa masekondi makumi matanhatu mushure mekubhadhara : Vhura iyo domain's ** Nameservers (NS) zvigadziriso mune registrar dashboard. Tarisa kuti registrar anodzosera otomatiki maservers ako chaiwo (semuenzaniso, ns-123.awsdns-15.com kana ada.ns.cloudflare.com) kana kusiya iyo domain inonongedza kune yayo yapera-yekupaka maseva (ns1.sedoparking.com / dns1.registrar-servers.com) Kana maseva ekupaka achiri kunyorwa, nemaoko pindazve yako yekugadzira nameservers uye chengetedza.
4. Kana iyo domain iri muChikamu 2 (Redemption Grace Period / redemptionPeriod, Mazuva 30/45 kusvika 75):
5. Tarisa mune imwe tebhu mukati medhibhodhi reregistrar yako inowanzonzi Dzimidzo Dzakapera -> Kudzikinura, **Dora / Dzosera **, kana Kubhadharisa Nyasha/Kudzikinura.
6. Bhadhara iyo RGP Kudzoreredza mubhadharo + 1-gore rekuvandudza.
7. RGP kudzoreredza kunoshanda sei kuRegistry (Verisign / PIR)? Paunobhadhara muripo weRGP, munyori wako anotumira EPP <update><restore op="request"> raira kuTLD Registry. Iyo Registry inochinja pakarepo iyo domain mamiriro kubva redemptionPeriod ku pendingRestore ** uye inoisa yako domain NS inorekodha kudzokera muTLD Root Zone mukati memaminitsi gumi nemashanu kusvika makumi matanhatu** apo munyori wako anoendesa restore op="report" simbiso yekuteerera.

Nhanho 3: Bypass yemuno ISP cache kunonoka nekuchenesa 8.8.8.8 uye 1.1.1.1¶

Pakapera nguva yako domain, inodzokorodza DNS inogadzirisa kutenderera pasirese yakavharira iyo yekupaka nameservers kana iyo isina kunaka. NXDOMAIN mhinduro (inotongwa neTLD's SOA Minimum TTL, kazhinji 900 ku 3,600 masekonzi, kana 86,400 seconds for NS zvinyorwa). The moment dig @a.gtld-servers.net yourdomain.com NS (kubvunza .com root server zvakananga) inoratidza yako chaiyo yekugadzira nameservers zvakare: 1. Vhura Google Public DNS Flush Cache (https://developers.google.com/speed/public-dns/cache): - Flush type NS kutanga kwe yourdomain.com, wobva wapukuta SOA, A, AAAA, MX, uye TXT. 2. Vhura Cloudflare 1.1.1.1 Purge Cache (https://one.one.one.one/purge-cache/): - Kubvisa NS, A, AAAA, uye MX zve yourdomain.com.

Chikamu chechitatu: Emergency Nameserver (NS) Kutama Panguva yeDNS Provider Outage (Uye iyo DNSSEC Musungo)¶

Ko kana yako domain kunyoreswa iri zana muzana inoshanda uye isina kupera nguva, asi yako ** Inotenderwa DNS Provider ** (Route 53, Cloudflare, GoDaddy DNS, DigitalOcean DNS, Azure DNS, DNSimple, Dyn) iri kutambura nekudzima kwakashata kana DDoS kurwiswa, uye iwe unofanirwa kutamisa yako domain's Nameservers (NS) kune backup DNS mupi izvozvi?

Iyo #1 Migration Killer: Kuchinja NS Apo DNSSEC (DS Record) Inogoneswa¶

Usati wachinja imwe chete NS rekodha pane yako registrar, mhanyisa uyu kuraira kuti uone kana DNSSEC inogoneswa pane yako domain pane mubereki TLD registry:

dig +short yourdomain.com DS @8.8.8.8

+-------------------------------------------------------------------------+
| WHY CHANGING NS RECORDS WITH AN ACTIVE DS RECORD BREAKS THE INTERNET    |
|                                                                         |
| 1. Parent TLD (.com) holds your old DNS provider's DS Record (Key #2371)|
| 2. Old DNS Provider goes down. You import zone to New DNS Provider      |
|    (unsigned, or signed with a brand-new Key #9910) and swap NS.        |
| 3. Validating Resolver (8.8.8.8 / 1.1.1.1 / Comcast / ISP) queries      |
|    New DNS Provider, sees signature does NOT match DS Key #2371.        |
| 4. Resolver assumes an active MITM Spoofing Attack -> Returns SERVFAIL  |
| 5. RESULT: Your domain stays 100% dead worldwide even though the new    |
|    DNS servers are up and answering cleanly.                            |
+-------------------------------------------------------------------------+

Yakachengeteka Emergency Nameserver Migration Checklist (Zero SERVFAIL Maitiro)¶

1. **Gadzirazve kana pinza yako yakazara DNS Zone Faili kune itsva DNS mupi kutanga **:
2. Usambofa wakafungidzira yako DNS marekodhi kubva mundangariro (@, www,uye api haawanzova marekodhi chete; kukanganwa MX, SPF/TXT, DKIM, _dmarc, autodiscover, kana CAA inotyora kutumira email uye TLS kuvandudzwa).
3. Kwaunowana yako yakazara DNS zone kana yako yekutanga DNS mupi dashboard iri pasi:
   • ** Tarisa Infrastructure-se-Code (Terraform, Pulumi, OctoDNS, DNSControl)** mune yako Git repository.
   • ** Tarisa kunze kwechangobva kuitika zone (BIND .zone mafaera)** kana kutsvaga nhoroondo DNS dhatabhesi (SecurityTrails, ViewDNS.info, DNSDumpster, kana Censys / crt.sh ye subdomain).
   • **Mubvunzo wakachengetwa marekodhi achiri kugara mukati meruzhinji recursive resolutions ** (dig @8.8.8.8 yourdomain.com MX, dig @1.1.1.1 yourdomain.com TXT, dig @9.9.9.9 api.yourdomain.com A) maTTL avo asati apera.
4. **Simbisa kuti mupi weDNS mutsva ari kupindura zvine chiremera kune rekodhi rega rega SATANA wabata munyori wako **: Ngatitii mupi wako mutsva akupa ns1.rescuedns.com uye ns2.rescuedns.com. Vaedze zvakananga ne dig:

   dig @ns1.rescuedns.com yourdomain.com SOA +norecurse
   dig @ns1.rescuedns.com yourdomain.com A +norecurse
   dig @ns1.rescuedns.com yourdomain.com MX +norecurse
   

   Mirira kusvikira flags: mutsetse mu dig musoro unosanganisira pachena aa (Authoritative Answer) uye anodzoka status: NOERROR.
5. Kana dig +short yourdomain.com DS akadzoka a DS record, kubata DNSSEC ku registrar:
6. ** Panguva yekudzima uko mupi wekare weDNS asingasvikike zvachose : Pinda mu ** Domain Registrar yako (kwawakatenga iyo domain), enda ku ** DNSSEC / DS Records ** chikamu, uye ** bvisa zvese DS zvinyorwa ** saka iyo domain inodzokera kune isina kusaina (Insecure) modhi panzvimbo yeTLD yevabereki. Mira kusvika dig +short yourdomain.com DS @a.gtld-servers.net inodzoka isina chinhu (uye flush DS mu 8.8.8.8 / 1.1.1.1), kana kuwedzera iyo ** nyowani ** DNS mupi wekupa DS rekodha padivi peiyo yekare kana uchiita yakarongwa yakawanda-signer migration.
7. ** Gadzirisa iyo Nameservers (NS) pane yako Domain Registrar**: Tsiva mazita akafa nemaservers ns1.rescuedns.com uye ns2.rescuedns.com mune yako registrar's ** Tsika Nameservers ** mapaneru (chinyorwa: kuchinja NS marekodhi mukati meiyo zone edhita hapana chinhu kana maseva ekare afa; iwe unofanirwa kushandura iyo ** Glue / Parent Delegation Nameservers ** paRegistrar level).
8. Kuchenesa NS uye DS caches paGoogle (8.8.8.8) uye Cloudflare (1.1.1.1): Shandisa iyo yeruzhinji cache yekuchenesa maturusi kubva Phase 2 Nhanho 3 kumanikidza kugashira nekukurumidza kwemazita matsva.

Chikamu chechina: Kupukunyuka iyo 60-Mazuva ICANN Registrar Transfer Lock panguva yenjodzi¶

Ko kana iwe uchida kuendesa yako domain kune nyowani registrar (ICANN Inter-Registrar Transfer), kungovharwa neDomain Status: clientTransferProhibited uye meseji inoti: "Iyi domain iri pasi pemazuva makumi matanhatu eICANN Transfer Lock nekuti ruzivo rwemabatiro rwakavandudzwa munguva pfupi yapfuura"?

1. Nei kukiyiwa kwemazuva makumi matanhatu kwatanga: Pasi pe ICANN Transfer Policy (Chikamu II.C.1), vanyoreri vanoisa kiyi yemazuva makumi matanhatu pese panonyoreswa domeini, inotamiswa pakati pevanonyoresa, kana kuti "Shanduko Yekunyoreswa" (kugadzirisa Zita, Zita Rekutanga, Zita Rekunyoreswa, Kero Yesangano, Registrant Yesangano).
2. Maitiro ekunzvenga kana kubuda muChinjo-ye-Registrant 60-mazuva kukiya:
3. **Usati wagadzirisa zveWHOIS zvekufonera **: Vanenge vese maregistrars makuru vanopa bhokisi rekutarisa pane yekuonana edit skrini yakanyorwa kuti: "Buda kunze kwemazuva makumi matanhatu ekukiyiwa kwekutumira mushure mekugadzirisa iyi yekubata." Kutarisa bhokisi iro kunokubvumidza kuti uvandudze yako admin/yakanyoresa email kero uye ugogadzira iyo EPP Auth-Code (Transfer Secret) kutamisa domain zuva rimwe chetero.
4. Yeuka kuti HAUDAI kuendesa iyo domain kunyoresa kuti uchinje DNS vanopa : Kunyangwe iyo domain yakavharwa kwemazuva makumi matanhatu kupesana ne Registrar Transfers (clientTransferProhibited), unogona kushandura iyo ** Nameservers (NS marekodhi) kune iyezvino registrar chero nguva ine zero yekumirira nguva; kushandura DNS kunotora maminetsi, nepo kunyoreswa kwakazara kunotora kusvika ku5 kune 7 mazuva kunze kwekunge akarasika anodzvanya pakarepo ** Bvumira Inobuda Kuendesa (FOa) bhatani.

Chikamu chechishanu: Kuomesa domain kunyoreswa uye DNS kunopesana nekubuda kweramangwana¶

Kamwe dura rako uye DNS resolution yadzoreredzwa zana muzana, zadzisa iyi resience yekutarisa:

• **Gonetsera Registry Lock (serverDeleteProhibited, serverUpdateProhibited, serverTransferProhibited) pane mishoni-yakakosha kugadzirwa domains **: Yakajairwa Registrar Lock (clientTransferProhibited) inogona kubviswa nekudzvanya kamwe chete kana anorwisa akabira registrar yako yekupinda. ** Registry Lock ** (inopihwa neVerisign, PIR, Cloudflare, CSC, MarkMonitor, Gandi, uye Porkbun/Namecheap yemabhizinesi domains) inokiya iyo domain yakananga kuTLD Registry level, ichida kunze-kwe-bhendi-ye-multi-person izwi / cryptographic verification pamberi pechero NS rekodhi inogona kuchinjwa kana kuti domain inodzimwa.
• ** Gadzirisa madomasi ekugadzira kwemakore mashanu kusvika gumi pachine nguva (ICANN maximum horizon is 10 years)**: Usambosiya bhizinesi-yakakosha domain pakuvandudzwa kwegore negore uko kadhi rechikwereti rekambani rakapera nguva rinogona kukonzeresa kupera. Pre-kubhadhara 5 kusvika 10 makore panguva imwe chete.
• ** Usambo shandisa an @yourdomain.com email kero seyekupinda kana yekubhadhara ziviso yekubata kune iyo registrar maneja yourdomain.com**: Shandisa yakatsaurirwa chengetedzo yekugovera runyorwa pane yakazvimiririra yekutonga domain kana yakaomeswa ekunze account, uye tarisa RDAP / WHOIS mazuva ekupera kuburikidza neatomatiki ekunze Prometheus / Uptime monitors (domain_expiry_days < 60)
• Pazasi NS uye DS TTLs (300 ku 3600 masekonzi) Maawa makumi mana nemasere isati yasvika chero yakarongwa DNS kutama: Kudzikisa maTTL pachine nguva kunovimbisa kuti vanogadzirisa vanochinja mukati me5 maminetsi eakarongwa cutover.

Nhamba dzenharaunda dzechimbichimbi uye zvirongwa zveagency¶

Kana dhomeini kana DNS ikadzima zvivakwa zvehutano, masevhisi ekukurumidzira, masevhisi ekushandisa, kana zvivakwa zvehurumende, tevera idzi nzira dzekukwira kwedunhu:

• United States neCanada: Dial 911 kana dhomeini/DNS yadzima ikadzima telemetry yechipatara chekiriniki, kutumira amburenzi, kana masisitimu ekuchengetedza hupenyu. Taura DDoS kurwiswa kweDNS zvivakwa kana BGP/DNS kupambwa ku CISA (1-844-Say-CISA / cisa.gov/report), iyo FBI IC3 (ic3.gov), kana Canadian Center yeCyber ​​Security (1-833-CYBER-88). For .gov domains, bata CISA .gov Registrar Helpdesk.
• United Kingdom: Dial 999 yekutyisidzira hupenyu kana kukanganisa kwakanyanya kweNHS. Taura kwakakosha kubuda kweDNS kana kubira domain ku NCSC (ncsc.gov.uk), uye bata Nominet (01865 332244) zvakanangana nekukasira .uk / .gov.uk / .nhs.uk registry nyaya.
• European Union: Dial 112 kumatunhu ese enhengo dzeEU. DNS sevhisi vanopa uye TLD mazita registries anodzorwa pasi pe EU NIS2 Directive (Directive 2022/2555) uye vanofanira kutaura zviitiko zvakakosha zvekuwanikwa kuCSIRT yavo yenyika mukati memaawa makumi maviri nemana.
• Australia neNew Zealand: Dial 000 muAustralia kana 111 muNew Zealand; taurira DNS yakaoma kana zviitiko zvedomeni ku ** ACSC (1300 CYBER1), auDA (ye .au), kana ** Domain Name Commission NZ (ye .nz)
• India neAsia-Pacific: Dial 112 muIndia kune mhinduro yechimbichimbi; shuma DNS/domain infrastructure kurwisa ku ** CERT-In (incident@cert-in.org.in)** mukati maawa matanhatu kana NIXI ye .in registry escalations.

Mibvunzo inowanzo bvunzwa¶

Nei dura rangu rakamira kushanda maawa makumi maviri nemana PASATI yaro yepamutemo WHOIS yekupera nguva chitambi?¶

Kutanga, tarisa nguva dzenguva: WHOIS `Registry Expiry Date` inogara yakadhindwa mu ** UTC (`Z`)**, iri maawa mana kusvika masere pamberi peNorth America timezones (zvichireva kuti dura rinopera pa `2026-11-01T04:00:00Z` inopera nguva pa `8:00 PM PDT` muna Gumiguru 31). Chechipiri, kana iwe `NS` marekodhi aive ne `24-hour` kana `48-hour` TTL uye registrar vakachinjanisa ivo `00:00 UTC` pazuva rekupera, vashandisi vane vagadzirisi vazorodzwa nekukurumidza vanorova peji rekupaka nekukasira vamwe vachigara vakachengetwa kwemaawa.

Registrar wangu haana zvachose kunze kwebhizinesi kana kusapindura (Dead / De-accredited Registrar), uye nzvimbo yangu iri kupera. Ndinoinunura sei?¶

Kana ICANN ikamisa kana kudzima registrar inotadza pasi pe **De-Accredited Registrar Transition Procedure (`DARTP`)**, ICANN inoendesa otomatiki madomasi ese kune anowana custodian registrar pasina mutengo kune vanonyoresa. Check `whois yourdomain.com` (kana `lookup.icann.org`) kuona kuti **Registrar** uye **IANA ID** parizvino inobata dura rako, kana faira nekukurumidza **Domain Renewal / Transfer Chichemo** zvakananga ne **ICANN Contractual Compliance (`icann.org/compliance/complaint`)**.

Nei webhusaiti yangu iri kushandira vamwe vatengi pane cellular data, asi ichiri kuratidza iyo yapera nguva yekupaka peji pahofisi yedu Wi-Fi maawa matanhatu mushure mekunge ndavandudza domain?¶

Hofisi network yako kana yemuno ISP inodzokorodza DNS solver yakavharira registrar's parking-peji. `NS` uye `A` inorekodha apo dura rakapera, uye kupaka nameservers kunozivikanwa kuseta akakwira TTLs (`3,600` ku `86,400` masekonzi / maawa makumi maviri nemana) saka mapeji ekushambadzira anogara akachengetwa kwenguva refu. Shandisa Google (`8.8.8.8`) uye Cloudflare (`1.1.1.1`) vachishandisa maturusi avo ekuchenesa webhu, ipapo pakombuta yako yemuno mhanya `ipconfig /flushdns` (Windows), `sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder` (macOS), kana `sudo resolvectl flush-caches` (Linux).

Chii Chinoitika kune MaEmail Akatumirwa kune @yourdomain.com Nepo Yedu Domain kana DNS Yakapera Nguva Kwemaawa 18? Vakarasika Nokusingaperi?¶

Kazhinji kazhinji, maemail ari pamutemo anotumirwa panguva yekutanga gumi nemaviri kusvika kumaawa makumi mana nemasere ekubuda kweDNS HAANA kurasika: anomisikidzwa pane sevha yekutumira yeanotumira uye anongosvika otomatiki mumaawa mashoma anotevera.. Pasi **`RFC 5321` (Simple Mail Transfer Protocol, Chikamu 4.5.4.1)**, kana sevha yekutumira (`Gmail`, `Microsoft Exchange Online`, `Postfix`) inowana kukundikana kwechinguvana DNS kutarisa (`SERVFAIL`) kana kusakwanisa kubatana ne `MX` muridzi, inoisa meseji mumutsara wekuyedzazve ** 4 kusvika mazuva mashanu (`96 to 120 hours`)**, kuyedza zvakare neexponential backoff. Zvakadaro, kana registrar peji rekupaka rakapera raisanganisira **wildcard null `MX` rekodhi (`0 .`)** kana sevha yekutumira tsamba yairamba tsamba nehard `550 5.1.1 User Unknown` kubhuroka zvachose, avo vanotumira vakagamuchira chiziviso chekukurumidza uye vanofanirwa kutumirazve maemail avo.

Ndinogona here kumisikidza vaviri vanopa DNS panguva imwe chete (Cloudflare + Route 53) nekungonyora maviri Cloudflare NS zvinyorwa uye nzira mbiri 53 NS marekodhi kumunyori wangu?¶

Hongu, chero bedzi `DNSSEC` yakaremara (kana kunyatsogadzirirwa ne `RFC 8901` Multi-Sigina DNSSEC) uye vese vanopa vanopa zvakafanana DNS marekodhi. Recursive solvers bvunza vese vakanyorwa mubereki `NS` rekodhi uchishandisa round-robin/RTT latency kusarudzwa (`SRTT`) Kana iwe ukanyora `ns1.providerA.com`, `ns2.providerA.com`, `ns1.providerB.com`,uye `ns2.providerB.com` mune yako registrar's Custom Nameservers uye chengetedza ese mazoni akawiriraniswa uchishandisa **OctoDNS**, **DNSControl**, **Terraform**, kana `AXFR / IXFR` zone transfers, yako domain inopona ne100 percent kubuda kweimwe DNS provider.

Chii chakasiyana clientHold uye serverHold muna WHOIS?¶

EPP mamiriro macode kutanga ne **`client...`** (`clientHold`, `clientTransferProhibited`) akaiswa neyako ** Domain Registrar** (mutengesi kwaunotonga account yako, seNamecheap kana GoDaddy) uye inogona kubviswa nekukasira nerutsigiro rwemunyori wako kana system yekubhadhara. Status codes kutanga ne **`server...`** (`serverHold`, `serverTransferProhibited`) akaiswa zvakananga ne **TLD Registry Operator ** (`Verisign`, `PIR`, `Nominet`) nekuda kwemirau yedare, kupokana kweUDRP, kumiswa kweregistry-level abuse, kana hardware **Registry Lock**, uye zvinoda kubata Registry kuburikidza nemunyori wako kuti usimudze.

Mazano anoenderana¶

• Domain zita kubiwa, DNS yakapera nguva, uye kutora webhusaiti
• SSL/TLS chitupa chakapera mukugadzirwa, HSTS preload kukiya, CA CAA rekodhi rekodhi, uye kuvandudzwa kwekukurumidzira.
• Google Workspace kana Microsoft 365 custom domain admin lockout, DNS TXT verification, uye kununura roja
• DNS kubira, ISP router WAN reconfiguration, uye nhapwa portal spoofing
• Webhu hosting dambudziko, kutama, uye backup kudzoreredza
• Nhamba dzenjodzi nenyika

Nzvimbo uye nhungamiro yepamutemo¶

• Internet Corporation yeMazita Akapiwa neNhamba (ICANN): * Yakapera Kunyoresa Recovery Policy (ERRP), Yakapera Domain Deletion Policy (EDDP), Inter-Registrar Transfer Policy (60-Day Change-of-Registrant Lock), uye EPP Status Codes Reference (clientHold, redemptionPeriod, pendingDelete)*.
• Internet Injiniya Task Force (IETF): RFC 6781 (DNSSEC Mashandiro Ekuita: Makiyi Rollovers uye Emergency DS Kubvisa) & RFC 8901 (Multi-Signer DNSSEC Models for Multi-Provider Authoritative DNS).
• National Institute of Standards uye Technology (NIST) (United States): Special Publication 800-81-2: Secure Domain Name System (DNS) Deployment Guide.
• Cybersecurity uye Infrastructure Security Agency (CISA) (United States): Emergency Directive 19-01: Mitigating DNS Infrastructure Tampering.
• European Union Agency yeCybersecurity (ENISA): NIS2 Technical Guidance yeDNS Service Provider uye TLD Name Registries.