Maintenance Window Notification - 3:30pm to 5:30pm, 1 June NZST.

Zone generation maintenance

Following the recent DNSSEC chain validation incident and to ensure the integrity of our final DNSSEC updates to complete the DNSSEC key rollover in the .nz zone, we've decided to manually validate them.��

This validation requires the temporary postponement of zone pushes during a window between 3:30pm to 5:30pm tonight, 1 June NZST. For reference, this maintenance should have no impact on recursive name server operations.

After the incident, we enacted several preventive measures. The DNSSEC key rollover process was temporarily halted, which allowed us to carefully analyse the situation and allocate sufficient time for the expiry of any mismatched records.

While these measures were necessary, they have increased the size of our DNS responses for a sustained period, creating a higher likelihood of technical issues. To reduce this risk, we're now initiating the completion of the key rollover process, which includes the removal of outdated keys.

We understand that this may impact your operations, and we appreciate your understanding as we take these steps to maintain the stability and security of the system.