Introduction Radix has engaged ARI Registry Services (ARI) to deliver services to our entire TLD portfolio. ARI brings ten years of experience as a TLD registry operator to the Radix partnership, providing the same software, infrastructure and experience that currently supports the the .au (Australia), the .ae (United Arab Emirates), the .qa (Qatar) and .om (Oman) country code Top-Level Domains. Performance ARI was one of the first operators to incorporate technology into its registry platform that allowed updates from domain name owners to be replicated to the TLD in real time. Where other registry technologies schedule such updates to occur at some time in the future, ARI’s registry systems will propagate changes in the TLD (a new domain or a change to an existing domain) as soon as those changes are received from Registrars. ARI’s SRS has successfully supported a large group of Registrars for ASCII and IDN based TLDs with exceptional levels of availability, performance and reliability. It will continue to provide this real time experience even as utilization of the supported TLDs increases. ARI operates registry systems in several geographically dispersed locations, each of which have enough capacity to service all demands of registry operations in their entirety while still retaining excess capacity. As a result, registry system performance remains high even during instances of reduced availability. Security We believe that the implicit trust afforded to TLDs by consumers must be validated by real protection measures. The integrity of data is protected by strictly controlling the methods by which registrars can update the TLD. In this way, it is ensured that changes to the TLD reflect only the deliberate and approved actions of domain owners. ARI then uses DNSSEC, so that consumers can validate the data they receive and assure themselves that they have not been subject to a Man in The Middle attack. ARI also conducts rigorous internal security audits and is subject to external audits as part of its obligations as the registry services provider for the AU ccTLD. ARI is also ISO27001 certified for its security practices relating to TLD operations. Its registrar provisioning systems (EPP and registrar portals) each have 2 factor authentication, to ensure that access to modify registry data is only granted to those authorised to do so. ARI strictly controls the access that each registrar receives to registry data, ensuring that privacy commitments to registrants are upheld and are done so in a manner that is verifiable. They also employ a defence in depth approach to security. This means that protective and forensic systems exist within each network segment of ARI’s registry systems. ARI has automated processes to ensure that resources which receive suspicious traffic are isolated from other resources, thus limiting any malicious exposure. Scalability The ARI platform and processes have been designed to meet the ever increasing demands placed on TLDs as they grow. The technology is designed to easily scale and still remain as robust, secure and responsive. Radix and ARI are committed to maintaining their platforms, their staff and their technology at a capacity well above that required for the demands of even the most active and popular TLDs. ARI conducts regular performance benchmarking against its systems to ensure that it has an accurate understanding of the capacity of its systems. With a decade of experience within the industry operating one of the most successful ccTLDs, ARI has well established practices that ensure they can predict usage trends over time. With an understanding of expected usage and the benchmarking of system capacity, ARI ensures that its systems remain well above expected resource demands and well ahead of any predicted increased demand. ARI’s registry platform design allows for such increases to occur seamlessly, without the need for disruptive maintenance windows. ARI’s systems make use of capacity on demand features built into the registry architecture design. With several multiples of expected demand capacity within the platform to call on, ARI can dynamically increase its registry systems resources without disruption. This design and allocation of resources is available at each of ARI’s geographically dispersed registry sites. Each site can also complement the others should the need arise.