Export UltraDNS Zone Files and Migrate DNS Hosting to Another Provider

Overview

This article explains how to export UltraDNS zone files and migrate DNS hosting to another provider. Prepare and check the zones at the new provider before changing nameservers. Keep the UltraDNS zones active during the transition.

Exporting a zone downloads its data. DNS queries are directed to the new provider after you update the domain's delegation, which identifies the authoritative nameservers responsible for answering queries for the domain. Make that change through your registrar or the administrator of the parent zone.

When to Use This Article

• You need zone files before moving DNS hosting away from UltraDNS.
• You are migrating one or more domains to another DNS provider.
• You need to know when to remove migrated zones from UltraDNS.

Before You Begin

• Confirm that you have access to the UltraDNS account and permission to export the zones.
• Confirm that you have access to the new DNS provider.
• Confirm that you have access to the domain registrar or assistance from the administrator responsible for changing the domain's delegation.
• Obtain the nameservers assigned by the new provider.
• Prepare a migration plan covering record imports, advanced DNS services, and DNSSEC, where applicable.

DNSSEC uses digital signatures to authenticate DNS data. If the domain uses DNSSEC, complete the DNSSEC planning in Step 3 before changing nameservers.

Step 1: Export the Zone Files

1. Log in to UltraDNS and select the appropriate account.
2. Select Domains.
3. Select the checkbox beside each domain you want to export. To select the listed domains together, use the checkbox at the top left of the domain list. Review the selection before continuing.
4. Click Export.
5. Review the domain names, domain types, and record counts in the confirmation window, then click Export again.
6. When the export submission message appears, click Close. The message directs you to Tasks to download the completed export.
7. Open Tasks at the top right of the portal, to the left of your profile name.
8. Locate the completed Zones Exported task and click the download arrow.
9. Retain the downloaded files for the migration.

Step 2: Prepare and Check the New Zones

1. Follow the new provider's instructions to add each domain and import its exported zone file.
2. Compare the imported records with UltraDNS. Check the required hostnames, record types, values, priorities, and time-to-live (TTL) values. A TTL specifies how long a DNS record can remain cached.
3. Have the new provider confirm the appropriate Start of Authority (SOA) record and zone-level nameserver (NS) records. Preserve any required subdomain delegations when reviewing NS records.
4. If you use Directional DNS, SiteBacker, Traffic Controller, Apex Alias, or Web Forwarding, confirm how the new provider will reproduce the required behavior. Check those services separately from the record import.
5. Query the new provider's assigned nameservers directly and confirm that they return the required DNS responses before proceeding.

Keep DNS changes made during the transition synchronized between both providers.

If your migration plan includes lowering TTLs, make those changes in advance and allow the previous TTLs to expire before relying on the shorter values. Lowering an NS record's TTL within UltraDNS does not change the parent zone's delegation TTL.

Step 3: Confirm DNSSEC Migration Requirements

If the domain uses DNSSEC, coordinate the migration with UltraDNS Support, the new provider, and your registrar or parent-zone administrator before changing nameservers. If the domain does not use DNSSEC, continue to Step 4.

Confirm the required DNSKEY and parent-zone DS record changes, their order, and the waiting periods for cached records to expire. DNSKEY records publish the zone's public keys. Parent-zone DS records link the delegation to the zone's DNSSEC keys.

Follow the migration procedure supported by both providers and the registrar or parent-zone administrator. Adding the new provider's DS records alone does not establish that DNSSEC preparation is complete.

Step 4: Update the Nameservers

1. After checking the new zones and completing the required DNSSEC preparation, log in to your domain registrar.
2. Replace the UltraDNS nameservers with those assigned by the new provider, following the registrar's instructions.
3. Repeat for each domain being migrated.

For a delegated subdomain, have the parent-zone administrator update the delegation in the parent zone instead. Changing SOA or NS records within an UltraDNS zone alone does not update the delegation in the parent zone.

Step 5: Keep UltraDNS Active During the Transition

Keep the zones active in UltraDNS for at least 48 hours after the nameserver change. Recursive resolvers can continue querying the previous nameservers while cached delegation information remains valid.

Allow additional time if the applicable delegation TTLs or the confirmed DNSSEC migration procedure require it. Remove the UltraDNS zones only after the transition period and verification are complete.

Verification and Expected Outcome

Before removing a migrated zone from UltraDNS, confirm that:

• The parent-zone delegation lists the intended new nameservers.
• The new provider's assigned nameservers return the expected records.
• Recursive DNS lookups return the expected results after the applicable caches expire.
• Websites, email, and other dependent services work as expected.
• The parent-zone DS records match the completed DNSSEC migration plan, and DNSSEC validation succeeds if DNSSEC is enabled at the new provider.

After verification and the transition period are complete, you can remove the migrated zones from UltraDNS. Retain your exported files.

Frequently Asked Questions

Does exporting a zone move DNS queries to the new provider?

No. Exporting downloads zone data. Update the registrar or parent-zone delegation to direct DNS queries to the new provider.

Can I delete the UltraDNS zones immediately after changing nameservers?

No. Keep them active for at least 48 hours after the nameserver change and until verification and any longer cache or DNSSEC waiting periods are complete.

Who can help configure the new provider?

Contact the new provider for import requirements, nameserver assignments, and service configuration. Contact UltraDNS Support for assistance with the UltraDNS export or existing UltraDNS configuration.

How do I request account cancellation?

If you also want to cancel your UltraDNS account after completing the migration, email cancel@digicert.com.

Related Articles

• Managing Your Domains 
• Migrating DNS Traffic to UltraDNS