HSCN/TN/nhs.uk logical DNS configuration
This diagram shows the logical DNS configuration used across HSCN/TN.
2019 technical refresh
NHS Digital will migrate the DNS service from the Transition Network early next year. It is expected that the transition will be seamless to users. More information, including notice of the transition timing, will be available in due course.
Two new resolution IP addresses have been implemented alongside the legacy IP addresses. The new NHS Digital RIPE IP addresses of 184.108.40.206 and 220.127.116.11 will run concurrently alongside the legacy, BT RIPE IP addresses 18.104.22.168 and 22.214.171.124.
These IP addresses will be decommissioned when the TN DNS service is replaced.
|Current - DNS BT RIPE IP Addresses
||New - NHS Digital RIPE IP Addresses
NHS Digital recommend that you carry out local risk assessments and testing of the new IP addresses to ensure that they can resolve DNS requests against the new IP address configurations.In readiness for the migration to an alternate service provider all organisations using the existing BT TN DNS service must reconfigure their service to use the new NHS Digital RIPE IP Addresses as soon as possible and no later than 31 March 2020.
Where firewall rules are in place to allow port 53 queries to only connect to the legacy IP addresses, these rules should be updated.
As part of this migration NHS Digital will modify the DNS A records for cns0.nhs.uk and cns1.nhs.uk such that they resolve to the new 155.231.231.x addresses instead of the legacy 194.72.7.x addresses. This will not affect DNS Resolution for sites continuing to use the legacy addresses.
For further information on the technical refresh please contact us by email at firstname.lastname@example.org
DNS change request process
NHS Digital own and administer nhs.uk DNS for the NHS in England.
NSS in Scotland administers the scot.nhs.uk (sub) domain.
NHS Wales Informatics Service manages the wales.nhs.uk/cymru.nhs.uk sub-domain.
HSCNI manages the n-i.nhs.uk sub-domain.
The TN provider will continue to manage the 'live' DNS service for the foreseeable future.
DNS change requests, to change either zone data files or individual DNS records, must be made directly to these bodies. The HSCN/TN service provider cannot accept DNS change requests from end-users.
Find England DNS change request forms and contact information.
For further details please see HSCN/Transition Network DNS.
NTP service replacement
The Network Time Protocol (NTP) service for the TN and HSCN will cease when the TN ceases and is not being replaced as a central service.
In readiness for your migration to a local NTP source you must reconfigure your service to use alternative source addresses no later than 31 March 2020.
The NHS Network Time Protocol guidance page provides guidance and standards that NHS organisations should use when implementing a replacement NTP service.