VIP domain

Protection of DNS operations against potential DoS attacks and maximum availability with minimal latency, thanks to a global infrastructure of DNS servers.

Get a quote

DNS hosting on servers located around the world

The VIP domain offers secure DNS hosting on CZ.NIC servers worldwide and the assurance of a professional partner with more than 25 years of experience in operating the Czech domain registry and providing hosting services for both national domain registries and private companies.

1,5 Tbps+

total DNS service capacity
protection against DoS attacks

global operational coverage
across six continents

XDP

(eXpress Data Path) for
maximum available power

25+

years of experience operating
a registry and DNS infrastructure

Main advantages

Hosting on .CZ infrastructure

DNS hosting on an anycast infrastructure built for the .CZ national domain and designed with an emphasis on maximum robustness, high capacity, diversity, and coverage not only within the Czech Republic and Europe, but also on all other continents. The most robust DNS infrastructure in the Czech Republic.

Protection against DoS attacks

High-capacity technology, active DoS scrubbing, and participation in the FENIX project ensure maximum resilience against DoS attacks and high availability, even in island mode. As long as .CZ is operational, the VIP domain will also be operational; there are no other links in the chain that could fail.

The fastest response from anywhere

Our own physical (not virtual) DNS anycast infrastructure, with more than 30 nodes located in 15 countries across all continents, guarantees the fastest possible response time.

Theft protection

The domain has been administratively transferred from a commercial registrar to CZ.NIC and is locked against administrative changes. It is thus protected against administrative theft and human error.

The hidden master

A hidden DNS server where all zone changes are made and from which they are propagated to the public DNS anycast. By default, access to the server is protected by hardware FIDO tokens, which are issued to all authorized users.

Validation tests

Before publication, changes to DNS records are checked. An automated validator detects potential errors; changes are auditable and allow for a quick rollback to older versions of the DNS zone.

Critical infrastructure according to NIS2

The infrastructure on which the VIP Domain service operates is designated as critical information infrastructure (CII) under the Cybersecurity Act and thus complies with the requirements of the EU NIS2 Directive.

DNSSEC security

A digitally signed domain protects against redirects and guarantees the authenticity of the content. You don't have to worry about a thing. CZ.NIC also handles regular key rotation and ensures that the latest encryption algorithm is used.

Additional features

Priotity customer
support 24/7
Dedicated consultation
hours up to 20 h/year
Visibility in WHOIS
(status VIP domain)
Priority Penetration Testing Services from the National CSIRT of the Czech Republic