Anycast DNS-Root Sovereignty
Could a country still resolve names if it were isolated? This assesses a nation's DNS-root resilience — how many of the core root servers have a copy inside its borders, and who operates them — the sovereignty read for national-resilience and policy analysis.
How it uses the graph
Traverses the DNS, physical, BGP, GeoIP layers of the graph, in 5 steps:
How it walks the graph5 steps
01Root coverage overview
Counting in-country root instances, distinct root letters and hosting ASNs…
DNSphysicalBGPGeoIP
02Sovereignty / resilience grade
Grading in-country root resilience and concentration…
DNSphysicalBGPGeoIP
03Per-letter coverage
Breaking instances down per root letter (A–M)…
DNSphysicalBGPGeoIP
04Root instance detail
Listing individual in-country root anycast instances…
DNSphysicalBGPGeoIP
05Hosting-ASN concentration
Aggregating which BGP origin ASNs host in-country root instances…
DNSphysicalBGPGeoIP
Why each step runs
- 01Root coverage overview. Aggregates the country's DNS_ROOT_INSTANCE footprint: how many of the A–M root identities have an in-country anycast instance, the Global-vs-Local split, and how many distinct BGP origin ASNs host them — the spine of the sovereignty read.
- 02Sovereignty / resilience grade. Derives a resilience grade in-query from letter diversity and hosting-ASN concentration: absent presence is CRITICAL, a single letter HIGH, low diversity or single-ASN concentration MEDIUM, otherwise LOW.
- 03Per-letter coverage. Shows which root identities are present and how each splits Global vs Local — exposes whether coverage is broad or leans on one or two heavily-replicated letters.
- 04Root instance detail. Enumerates the actual anycast nodes (letter, type, town, hosting ASN, IPv6 support) so the coverage claim is auditable per instance; filtered by the chosen Global/Local scope.
- 05Hosting-ASN concentration. Where bgpOriginAsn is recorded, groups instances by hosting ASN to surface single-operator concentration — the dependency-risk signal behind the grade. Optional: most instances on this dataset have no recorded origin ASN.