What is Root Zone?

The Root Zone is the highest layer of the Domain Name System hierarchy. It is a specially managed delegation file that contains the authoritative name server records for every top-level domain (TLD), both generic (e.g., .com, .org) and country-code (e.g., .uk, .jp). The Root Zone does not contain the actual DNS records for individual domain names but provides the initial delegation pointers that allow a DNS resolver to begin its iterative query process. Without the Root Zone, no domain name on the public internet could be resolved.

The content of the Root Zone is maintained and published by the Internet Assigned Numbers Authority (IANA), a function of ICANN. The file is distributed to the operators of 13 logical root server systems, identified by letters a through m, using anycast routing for redundancy and scaling. These root servers are operated by independent organizations such as Verisign, the University of Southern California's Information Sciences Institute, and NASA's Ames Research Center. The root zone file itself is signed (DNSSEC) using a root key signing key to allow resolvers to validate the authenticity of delegations.

When a DNS resolver receives a query for an unknown name, it first contacts a root server by sending a query for the TLD. The root server responds with a referral to the TLD's authoritative nameservers. This step is the first hop in the recursive resolution chain. The Root Zone is one of the most critical components of internet infrastructure, and its governance has been historically contentious, particularly regarding its oversight transition from the U.S. National Telecommunications and Information Administration to ICANN's multistakeholder model in 2016.