I-D Action: draft-feng-dnsop-authdns-operator-change-00.txt

internet-drafts@ietf.org Mon, 10 August 2026 11:12 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-feng-dnsop-authdns-operator-change-00.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <178636036957.437543.4120268400458736386@dt-datatracker-559c48c7fb-llb9x>
Date: Mon, 10 Aug 2026 04:12:49 -0700
Message-ID-Hash: ZBT5JKB2PGZLIQNEQJH64PE56WBEPXUH
Reply-To: internet-drafts@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/caotPLPT_fWC2FuEw3qRE9knb3M>

Internet-Draft draft-feng-dnsop-authdns-operator-change-00.txt is now
available.

   Title:   Operational Guidance for Authoritative DNS Operator Changes with Service Endpoint Migration for Registered Domain Names
   Authors: Yuming Feng
            Yu Zhang
            Di Ma
            Weizhe Zhang
            Rongwei Yang
   Name:    draft-feng-dnsop-authdns-operator-change-00.txt
   Pages:   25
   Dates:   2026-08-10

Abstract:

   A registered domain name can change its authoritative DNS operator
   while the registrant also migrates service endpoints, such as web,
   API, CDN, mail, or cloud-hosted services.  In this situation, service
   RRsets such as A, AAAA, CNAME, MX, SRV, SVCB, and HTTPS RRsets can
   change at the same time as the parent-side delegation changes.

   The parent-side delegation change is not observed by all recursive
   resolvers at the same instant.  During the transition, some resolvers
   can continue to query the losing DNS operator while others query the
   gaining DNS operator.  If the losing operator continues to serve
   stale service RRsets, or if it stops serving the zone too early,
   users can receive different answers depending on resolver cache state
   and can experience intermittent service failure.

   This document provides operational guidance for authoritative DNS
   operator changes with service endpoint migration for registered
   domain names.  It recommends a registrant-authorized change plan, a
   consistency profile for in-scope service RRsets, synchronized
   provisioning or a common source of truth, a hold period during which
   the losing DNS operator continues to serve target or otherwise
   equivalent data, and verification points that directly compare the
   losing and gaining authoritative servers and classify observed states
   as planned, service-risk, or unexpected-delegation conditions.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-feng-dnsop-authdns-operator-change/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-feng-dnsop-authdns-operator-change-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts

I-D Action: draft-feng-dnsop-authdns-operator-cha… internet-drafts