Discontinuation of Legacy NS1 and NS3 IP Addresses

Last updated

Note

This migration completed on July 6, 2026. Domains still delegated to the legacy ns1.dnsimple.com to ns4.dnsimple.com names keep resolving, but we strongly recommend updating to the current names. For the current list of name server hostnames and IP addresses, see DNSimple Name Servers.

Table of Contents


As part of our multi-year effort to modernize our DNS infrastructure, we retired the legacy IP addresses associated with our NS1 and NS3 name servers. These IPs had already been replaced by our cache edge network, first introduced in 2023.

Following the expansion of our cache edge infrastructure in 2024 and the discontinuation of the legacy NS2 and NS4 IP addresses in June 2025, NS1 and NS3 were the final two name servers still pointing to the older infrastructure. The legacy IPs were fully decommissioned on July 6, 2026.

What changed

The table below summarizes the IP addresses that were deprecated, along with their replacements in the cache edge layer:

Name Server Retired IP Replacement IP
NS1 162.159.24.4 199.247.152.53
NS1 2400:cb00:2049:1::a29f:1804 2620:111:8004::53
NS3 162.159.26.4 199.247.154.53
NS3 2400:cb00:2049:1::a29f:1a04 2620:111:8006::53

As part of this change, the canonical name server hostnames for NS1 and NS3 also moved to dedicated edge domains:

  • ns1.dnsimple.com to ns1.dnsimple-edge.com
  • ns3.dnsimple.com to ns3.dnsimple-edge.io

The legacy ns1.dnsimple.com and ns3.dnsimple.com hostnames continue to resolve after the migration, but they now point to the new edge infrastructure.

Timeline

Date Milestone
May 1, 2026 New NS1 & NS3 edge infrastructure went live. Self-migration was available from this date.
May 1, 2026 Started staged automatic migration of domains registered with DNSimple (Group 1)
May 29, 2026 Ended staged automatic migration of domains registered with DNSimple (Group 1)
June 1, 2026 Started migration of hosted zones still delegated to the legacy hostnames (Group 2)
June 12, 2026 Ended migration of hosted zones still delegated to the legacy hostnames (Group 2)
June 15, 2026 Cloudflare brownout #1 - legacy IPs temporarily stopped answering to surface remaining traffic.
June 22, 2026 Cloudflare brownout #2 - legacy IPs temporarily stopped answering to surface remaining traffic.
July 6, 2026 Legacy Cloudflare IPs fully decommissioned. They no longer serve DNSimple zones.

The two brownouts on June 15 and June 22, 2026 briefly paused answering queries on the legacy Cloudflare IPs. This surfaced any traffic still landing on the old infrastructure so that remaining configurations could be identified and updated before the final decommission date.

Who was impacted

Three groups of customers were affected by this migration, each with a different level of action required.

Group 1 - Domains registered with DNSimple

No action was required. For domains registered with DNSimple and delegated to our name servers, we handled the migration automatically between May 1 and May 29, 2026. For domains using vanity name servers, we also updated the glue records at the registry and the corresponding A/AAAA records in the zone.

If you independently maintain a copy of your zone at another DNS provider (not through DNSimple’s secondary DNS), you should update the NS records at that provider to reference ns1.dnsimple-edge.com and ns3.dnsimple-edge.io. The old ns1.dnsimple.com and ns3.dnsimple.com hostnames continue to work, but we strongly recommend the current names.

Group 2 - Domains registered elsewhere with DNS hosted at DNSimple

We force-migrated these domains by June 12, 2026. For domains registered at another registrar but using DNSimple for DNS, the delegation at that registrar pointed at ns1.dnsimple.com and/or ns3.dnsimple.com. By June 12, 2026, we transparently updated the A and AAAA records for ns1.dnsimple.com and ns3.dnsimple.com to point at the new edge infrastructure, so delegation continued to work without changes on the customer side.

We strongly recommend updating the delegation at your registrar to the current name server names.

Group 3 - Using vanity name servers with a domain NOT registered through DNSimple

These customers had to self-migrate before July 6, 2026. For vanity name servers (for example ns1.yourdomain.com), the glue records at the registrar pointed at the legacy Cloudflare IPs. We cannot update glue records on a customer’s behalf - only the registrar can do that.

Warning

Since July 6, 2026, the legacy Cloudflare IPs no longer serve DNSimple zones. Some of them still answer queries, but with wrong or unrelated data, so glue records that point at them can make your domain resolve incorrectly or not at all. Update the glue records at your registrar to the replacement IPs listed above.

How to check your glue records

If you use a vanity name server, you can check whether your glue records still point at a legacy IP by running:

dig +short ns1.yourdomain.com
dig +short ns3.yourdomain.com

If the query returns 162.159.24.4 or 162.159.26.4 (or the matching IPv6 addresses), the glue records still point at the retired IPs. Update them at your registrar to the replacement IPs listed above; whois yourdomain.com shows the name server addresses the registry currently publishes.

For non-vanity setups, you can check which name servers your domain uses at its registrar. If they reference ns1.dnsimple.com or ns3.dnsimple.com, they now resolve to the new edge infrastructure, so the domain keeps resolving. We still strongly recommend updating to the current names.

What you need to do

  • Group 1 - registered with DNSimple: No action required. We handled the migration between May 1 and May 29, 2026.
  • Group 2 - hosted at DNSimple, registered elsewhere: Your domain keeps resolving, because we migrated the legacy hostnames transparently by June 12, 2026. We strongly recommend updating your delegation at your registrar to the current name server names.
  • Group 3 - vanity name servers: If your glue records still point at the retired IPs, update them at your registrar to the replacement IPs above.

The legacy ns1.dnsimple.com to ns4.dnsimple.com names resolve to the same servers as the current names, so a domain delegated to them still resolves. We strongly encourage everyone to switch to the current names, for two reasons:

  • DNSSEC: DNSimple is signing the current name server domains with DNSSEC (dnsimple-edge.com, dnsimple-edge.net, and dnsimple-edge.io are signed, and dnsimple-edge.org is next).
  • No single point of failure: each current name server uses a domain on a different TLD, so a problem at one registry cannot take all four offline.

The current names are:

  • ns1.dnsimple-edge.com
  • ns2.dnsimple-edge.net
  • ns3.dnsimple-edge.io
  • ns4.dnsimple-edge.org

For domains registered with DNSimple, see Delegate a DNSimple-Registered Domain to DNSimple Name Servers. For domains registered elsewhere, update the name servers at your registrar; see Delegate a Domain from Another Registrar to DNSimple.

You can always refer to the latest list of official DNSimple name servers here: DNSimple Name Servers.

Have more questions?

If you have additional questions or need any assistance with the name server IP address change, just contact support, and we will be happy to help. You can also read more about DNS hosting at DNSimple.