Leveraging multiple datasets, we evaluate the current status of African ccTLDs technical environment with regard to best practices. Compared to the top 10 ccTLDs, African ccTLDs appear to have enough IPs to maintain service availability while handling authoritative DNS queries. With regard to the early stage of IPv6 deployment in the AFRINIC region, it is interesting to note that 94% of African ccTLDs support IPv6. This is due to the huge adoption of out of the region or offshore DNS anycast provider.
The majority (84%) of African anycast traffic is handled by non-profit foundations and/or organisations using resources from other RIRs such as RIPE-NCC and ARIN. Furthermore, less than 30% (16) of African ccTLD has signed their zone. From this group, the majority is using the recommended algorithm RSASHA256 (Algorithm 8) as suggested by BCP 14.
Strangely some African ccTLDs lack basic DNS configuration such as missing PTR records, lame delegation, EDNS compliance and consistent serial numbers. These misconfigurations can be easily fixed with consistent monitoring or the use of modern automated registry software which comes with internal checks. Overall, African ccTLDs are characterised by the usage of out of region resources.
Click here to download the research paper
