The .lu infrastructure is an essential component of the operation of websites and email addresses with a .lu extension. It must maintain at high standards of accessibility and security. 

A DNSSEC-signed zone

Since 2011, the DNSSEC (Domain Name System Security Extensions) protocol has been implemented within the .lu top-level domain name infrastructure. All DNS records in the .lu zone may be authenticated by cryptographic keys. This step ensures the perfect integration of each domain into a chain of trust within the tree structure of the Internet naming system.

Stable, effective infrastructure

All of the data needed for .lu to function as it should is saved on multiple DNS servers with authority over the .lu zone. Distributed worldwide, one of them is managed and maintained in Luxembourg by engineers from the Restena Foundation.

This automatic replication of data ensures the stability of the domain name system (DNS), particularly the performance and availability of this data. This configuration also enables the .lu registry to be in close touch with visitors and their DNS queries, and by extension, offering a high degree of resilience to any cyberattacks.

The efficiency and quality of the server for the .lu national extension are confirmed by the DNS RIPE NCC monitoring service (DNSMON) of the European association RIPE (European IP Networks).

ISO 27001-certified activities  

Thanks to the information security management system (ISMS) implemented by the Restena Foundation, the activities carried out under the .lu registry have been certified according to ISO/IEC 27001:2013. It is part of its commitment to continuous improvement of .lu in the interest of Luxembourg.

The certification attests, among other things, that Restena provides an efficient and secure Domain Name System (DNS) and respects and complies with regulations and standards.