SIDN partners with i3D.net to host its DNS Anycast infrastructure

i3d.net x SIDN
24 March 2026

Operating a national top‑level domain means being responsible for infrastructure that must work under all circumstances. In order to guarantee global availability and reachability of the .nl domain at all times, SIDN, the registry for the .nl domain, has partnered with i3D.net to host part of its authoritative DNS Anycast platform.

The collaboration strengthens the technical foundations of .nl and reflects SIDN’s continued focus on reliability, operational independence, and European‑based infrastructure.

Moving to a new provider: a technical and organizational decision

As part of this partnership, SIDN is migrating its own DNS Anycast platform from its previous provider to i3D.net’s infrastructure. According to Marc Groeneweg, Senior System Engineer at SIDN, the decision was driven by practical and architectural considerations rather than dissatisfaction with the services of its former provider.

Our DNS platform was built on bare metal infrastructure and fully integrated into our CI/CD pipelines. When our former provider announced changes to their bare metal services, we needed to find a partner that could continue to support our operating model.

SIDN evaluated multiple providers, with a strong preference for a European provider with a globally distributed infrastructure and full control over network behavior. Key requirements included API‑driven provisioning, BGP‑based Anycast announcements, and the ability to integrate cleanly with SIDN’s existing automation and deployment workflows.

Achieving reliability through diversity, not dependency

For SIDN, DNS reliability is achieved through a multi‑provider strategy rather than reliance on a single platform. The .nl domain is supported by several independent DNS Anycast networks, ensuring that name resolution remains available even if one platform experiences issues.

Within this setup, i3D.net hosts one of SIDN’s authoritative DNS Anycast platforms managed by SIDN itself.

DNS itself is inherently resilient. What matters most is the reliability of the organizations operating the infrastructure. From an operational perspective, we look at engineering culture, long‑term commitment, and the ability to handle real‑world challenges.

In this context, i3D.net’s experience operating globally distributed, high‑traffic infrastructure was seen as a valuable complement to SIDN’s DNS operations. This includes environments that are routinely exposed to sudden traffic spikes, network stress, and DDoS activity.

Engineering‑led collaboration as a foundation

A defining aspect of the partnership has been the close collaboration between SIDN’s and i3D.net’s engineering teams. Rather than treating the infrastructure as a static service, both sides worked together during evaluation and proof‑of‑concept phases to validate requirements and adjust implementations where needed.

This was very much an engineer‑to‑engineer process. We were able to test the platform extensively, discuss design choices directly, and adapt our pipelines where necessary. That level of openness was essential for us.

Because the migration from its previous provider is not a like‑for‑like replacement, SIDN has prepared for the necessary adjustments within its automation pipelines and network configuration. The DNS Anycast platform is being built and validated in parallel to ensure continuity and stability.

SIDN x i3D.net colleagues
i3D.net and SIDN engineers meet after signing their new collaboration.

A measurement‑driven Anycast approach

SIDN applies a data‑driven strategy to deploying Anycast infrastructure. Instead of maximizing the number of locations, SIDN evaluates performance, routing behavior, and resilience characteristics to determine where Anycast nodes deliver the most benefit.

As part of the collaboration, SIDN conducted measurements across i3D.net’s network to assess latency and reachability from different parts of the internet. These measurements informed decisions on node placement and helped ensure that the deployment meets SIDN’s operational expectations.

This approach aligns with SIDN’s broader research into Anycast behavior, where empirical data guides infrastructure decisions rather than assumptions.

Digital autonomy, European infrastructure, and advice from the Dutch Cloud Community

Beyond technical requirements, the partnership reflects SIDN’s commitment to operate critical internet infrastructure in a way that supports digital autonomy.

SIDN deliberately prioritizes partners with a strong European foundation, transparent governance, and clear legal jurisdiction. For essential services such as DNS, understanding where infrastructure is located and under which frameworks it operates is increasingly important for registrars, policymakers, and the wider internet community.

As i3D.net is European-owned and subject to European regulations, by selecting it as a partner SIDN reinforces its commitment to trustworthy, European‑anchored infrastructure for the .nl domain.

During the selection process, SIDN was supported by the Dutch Cloud Community (DCC), which provided guidance on suitable DNS Anycast providers within the European cloud ecosystem.

When SIDN asked us for guidance in selecting a DNS Anycast provider, we put forward i3D.net as one of our recommendations because of their strong European foundation and proven expertise in resilient infrastructure. Their globally connected Anycast network aligns with the principles of digital sovereignty and the need for trustworthy, locally anchored providers. We’re pleased to see SIDN choose i3D.net, a partner that strengthens the reliability of Dutch and European internet services.

Strengthening the operational foundations of .nl

Through this partnership, SIDN is strengthening the operational foundations that keep .nl stable and resilient, with i3D.net hosting a key part of its authoritative DNS Anycast infrastructure. By combining a multi‑provider strategy with close engineering collaboration and i3D.net’s globally connected network, SIDN reinforces the reliability of DNS resolution for .nl day in, day out.