ternis.net Backbone // All Systems Operational

Autonomous Infrastructure & Anycast DNS

The technical architecture powering ternis.org: Autonomous authoritative Anycast nameservers, Stratum time synchronization, sovereign mail relays, and cryptographic DNSSEC validation on ternis.net.

Anycast BGP
Redundant Datacenters DE
Dual-Stack
IPv4 & Native IPv6
DNSSEC
ECDSA Curve P-256 (Alg 13)
0.0%
Telemetry & Zero-Logging

Core Backbone Nodes

Geographically separated authoritative nameservers and infrastructure daemons on ternis.net.

NS1 • PRIMARY Operational

one.ns.ternis.net

Primary authoritative Anycast routing node with instant zone synchronization and high-throughput packet processing.

Location: Frankfurt am Main (FRA), DE
Engine: BIND 9 + Knot DNS
DNSSEC: ECDSA P-256 (Alg 13)
Direct Alias: example-dns.net
NS2 • SECONDARY Operational

two.ns.ternis.net

Geographically isolated secondary replication node with autonomous upstream transit and emergency failover.

Location: Nuremberg (NUE), DE
Engine: NSD (Name Server Daemon)
DNSSEC: ECDSA P-256 (Alg 13)
Direct Alias: example-dns.org
NTP • STRATUM 1/2 Synchronized

time.ternis.net

Hardware-referenced network time service providing sub-millisecond precision for DNSSEC RRSIG and cluster logs.

Protocols: NTPv4, NTS (RFC 8915)
Jitter: < 0.15 ms
Usage: Core Systems & Clusters
RELAY • GATEWAY Enforced

_spf.ternis.net

Central cryptographic SPF inclusion, DKIM signing, and DMARC policy anchor for all ecosystem domains.

SPF Policy: include:_spf.ternis.net
DMARC: p=reject (Strict)
DKIM: 2048-bit RSA + Ed25519

Live DNS Query Sandbox

Select a query preset to inspect real authoritative responses from one.ns.ternis.net.

one.ns.ternis.net — Authoritative Query
$ dig @one.ns.ternis.net ternis.org SOA +noall +answer
ternis.org.		3600	IN	SOA	one.ns.ternis.net. hostmaster.ternis.org. 2026100601 3600 600 1209600 300

Delegated Zones & Ecosystem

Direct inventory of all forward and reverse DNS zones authoritatively served by the ternis.net cluster.

Zone (Domain) Registry Nameservers DNSSEC Status
ternis.org Public Interest Registry (.org) one/two.ns.ternis.net Signed (Alg 13) Active
ternis.net Verisign (.net) one/two.ns.ternis.net Signed (Alg 13) Active
example-dns.com Verisign (.com) one/two.ns.ternis.net Signed (Alg 13) Active
example-dns.net Verisign (.net) one/two.ns.ternis.net Signed (Alg 13) Active
example-dns.org PIR (.org) one/two.ns.ternis.net Signed (Alg 13) Active
ternisdomains.de DENIC (.de) one/two.ns.ternis.net Signed (Alg 13) Active
mtex.dev Google Registry (.dev) one/two.ns.ternis.net HSTS Preload + Signed Active

Related Technical Documentation

In-depth engineering guides covering how our authoritative Anycast cluster, glue records, and DNSSEC are deployed.