Partnering with CIRA for the security and stability of .nl

Operating the .nl domain is and will remain our top priority

SIDN and CIRA teamwork concept

SIDN is a non-profit organisation that has run the .nl domain successfully for nearly 30 years. Our country-code domain is one of the most secure and innovative in the world. In all that we do, safeguarding data security and the constant availability of the .nl domain are our top priorities.

DRS5 – the system that we currently make available to registrars for registering .nl domain names and managing registrations – dates from 2011 and is due for replacement. Although DRS5 remains stable, we are conscious that incidents are becoming more frequent, and that managing the system requires ever more time and resources. As well as posing potential long-term risks, that situation hampers our ability to innovate.

Portrait Roelof Meijer, CEO SIDN
Roelof Meijer, SIDN's CEO

“When we replaced our previous registration system (DRS4), we chose to develop a new system ourselves, as we had always done in the past, using the latest and best architecture of the day,” explains SIDN’s CEO Roelof Meijer. “At that time, we had little choice, because no realistic alternative was available.”

New registration system: buy, build or collaborate?

Each time we have previously developed a new registration system, the process has been prolonged and expensive, and has placed other demands on our relatively small organisation. With that in mind, we felt that independently building a replacement for DRS5, exclusively for our own use, was not a viable option. We therefore investigated a number of other options: using an open-source system, buying a proprietary system or collaborating with one or more other registries to upgrade an existing system. It quickly became apparent that there were still no proprietary or open-source systems available that met our wishes and requirements. The only remaining option was therefore collaboration.

“Like us, many other registries face major challenges, such as increasingly sophisticated cybersecurity threats, the need to meet higher quality and continuity requirements, the increasing complexity and cost of core IT services, a market shortage of suitably qualified IT professionals, and greatly reduced growth in the domain name market. Having concluded that building another new system ourselves, exclusively for our own use, wasn’t a viable option, we ultimately decided that collaborating with another registry was the best way to go. By working in tandem, we can share the cost and effort involved in developing, operating and maintaining a flexible registration system,” adds Roelof Meijer.

Partnership with CIRA based on similar values and priorities

Discussions with various registries, including Canada’s CIRA, and a detailed assessment by the Software Improvement Group (SIG) led us to conclude that the registration system used by CIRA for .ca and other domains was the most suitable for joint use and further development. The .ca registration system doesn’t currently use cloud technology, but is suitable for a cloud environment. It’s a modern, proven-stability system with flexible functionality. We began discussions with CIRA in 2022, and the following year the decision was taken that SIDN would go over to the CIRA system and that the two registries would collaborate on its further development. A partnership between SIDN and CIRA was announced shortly afterwards.

The partnership builds on many years of knowledge-sharing and collaboration between the two organisations in international fora, at various levels and spanning various disciplines. “In many respects, CIRA and SIDN are similar organisations with similar values, priorities, objectives and even technological preferences,” says Roelof Meijer. “Our new partnership will benefit both Canada and the Netherlands. It opens the way for pooling the expertise and development capabilities built up over the years by 2 leading registries to create a state-of-the-art registration system.”

Latest technology, retention of control, and more capacity for innovation

Our partnership means we can ensure that the .nl registration system is based on the latest and best proven technology, and remains so going forward. It also enables us to retain control over the technology and the performance of our primary tasks, as well as to safeguard the operational security, stability and financial sustainability of our registry function. By joining forces with CIRA, we will be able to reduce risks and cut costs while also releasing capacity for innovation. Thus opening the way for the faster introduction of new functionalities and facilitating the retention of in-house expertise. In order to be suitable for multiple TLDs, the new system will be developed to very high quality and flexibility standards, benefitting .nl. We know from feedback that .nl registrars want a registration system to which new features can be added and rolled out quickly.

Impact on .nl, the global registry world and the internet community

Roelof Meijer: “Although .nl is the fourth-biggest country-code domain in the world, even for us it’s a challenge to cover the many cyberthreats and other risks we face, while also meeting all the requirements that we and our customers have regarding our registration system. In line with the global trend, the .nl domain is no longer growing, but our costs keep on rising. For smaller country-code domains, or ccTLDs, that tension between income stagnation and cost growth represents an even bigger challenge.” Over the next few years, many registries will need to replace their IT systems. So they are very interested in the registration system that we and CIRA are developing. By making the flexible, modern system we create available to other ccTLD registries, we can make our industry stronger, increase stability and quality, and share the cost of maintenance and development.

Such activities will not affect our status as a non-profit organisation with a public role. “Operating the .nl domain is and will remain our top priority,” assures Roelof Meijer. “Any income generated by making the new registration system available for use by other registries will reduce costs for SIDN and CIRA. An additional revenue stream for SIDN will increase our ability to invest in the registration system’s security and further development. That will have tangible benefits for .nl registrars, Dutch domain name registrants and internet users in the Netherlands. It’ll also contribute to the strength and resilience of the global registry world and internet community.”