Internet Governance: ICANN, IANA, RIRs, and IETF

No single government, company, or organization "runs" the internet. Instead, a complex ecosystem of bodies governs different layers — from the technical standards that define how packets flow, to the policy decisions that determine who can register a domain name. Understanding this ecosystem is essential for anyone who wants to grasp how the internet actually works as a global system.

The Core Principle: Decentralized, Multi-Stakeholder Governance

Internet governance operates on a multi-stakeholder model: governments, the private sector, civil society, academia, and the technical community all participate in policy decisions. No single party has unilateral control. This design is deliberate — the internet's founding community was deeply skeptical of centralized authority.

The key bodies can be grouped by their function:

• IANA / ICANN — Coordinates names and numbers (domain names, IP addresses, protocol parameters)
• Regional Internet Registries (RIRs) — Allocate IP addresses and AS numbers to ISPs and organizations
• IETF / IRTF / IAB — Develop and publish technical standards (the protocols the internet runs on)
• ITU — UN agency that coordinates global spectrum and, increasingly, participates in internet governance discussions
• ISOC — Internet Society; advocacy and community organization

IANA: The Root Coordinator

IANA (Internet Assigned Numbers Authority) is a function — not an independent organization — that coordinates the global internet's naming and numbering systems. IANA's responsibilities fall into three areas:

1. Domain Names (Root Zone)

IANA manages the root zone of the DNS: the master list of all top-level domains (TLDs) and their authoritative name servers. When a new country-code TLD (ccTLD) is created or a new generic TLD (gTLD) is delegated, IANA makes the authoritative changes to the root zone.

2. IP Addresses and AS Numbers

IANA allocates large blocks of IPv4 and IPv6 address space to the five Regional Internet Registries (RIRs), which then distribute them to ISPs and end-users. IANA also allocates Autonomous System (AS) numbers.

3. Protocol Parameters

IANA maintains registries for protocol constants: TCP/UDP port numbers, HTTP status codes, DNS record types, MIME types, and hundreds of other technical parameters. When a new protocol needs a new port number or status code (assigned through the IETF process), IANA is the registry that records the assignment.

ICANN: Policy for the Name Space

ICANN (Internet Corporation for Assigned Names and Numbers) is the non-profit organization that performs the IANA function and develops policy for the domain name system.

Founded in 1998 under a contract with the US Department of Commerce, ICANN operates under a complex governance structure that involves:

• Board of Directors — Provides strategic oversight.
• Supporting Organizations — Three bodies representing different communities:
• ASO (Address Supporting Organization) — Advises on IP address policy (represents RIRs)
• GNSO (Generic Names Supporting Organization) — Policy for generic TLDs (.com, .org, new gTLDs)
• ccNSO (Country Code Names Supporting Organization) — Policy for ccTLDs (.uk, .de, .cn)
• Advisory Committees — Including the GAC (Governmental Advisory Committee) representing 180+ national governments.

The IANA Stewardship Transition

In 2016, the US government formally ended its historic oversight role over the IANA function. This "IANA stewardship transition" moved accountability to the global multi-stakeholder community — represented through ICANN's new accountability mechanisms. It was a landmark moment in internet governance history.

New gTLD Program

ICANN has periodically launched programs to expand the TLD namespace. The 2012 round introduced over 1,200 new gTLDs (like .app, .cloud, .bank, .london). A new application round is underway as of 2026, expected to add hundreds more.

Regional Internet Registries (RIRs)

The five Regional Internet Registries are non-profit membership organizations that manage the allocation of IP addresses and AS numbers within their respective geographic regions:

RIR	Region	Founded	IPv4 Status
ARIN	North America	1997	Exhausted (2015)
RIPE NCC	Europe, Middle East, Central Asia	1992	Exhausted (2019)
APNIC	Asia-Pacific	1993	Exhausted (2011)
LACNIC	Latin America, Caribbean	2002	Exhausted (2014)
AFRINIC	Africa	2005	Near exhaustion

The Allocation Hierarchy

IP addresses flow down a hierarchy:

IANA
  └── RIRs (large blocks, e.g., /8s)
        └── ISPs / LIRs (Local Internet Registries)
              └── End users / enterprises

IANA distributed the entire IPv4 address space to RIRs (the last blocks were allocated in 2011). The IPv6 address space is vastly larger — 2¹²⁸ addresses — and RIRs continue to have ample IPv6 allocations.

What RIRs Do

Beyond address allocation, RIRs:

• Maintain the WHOIS database (registrant information for IP address blocks)
• Operate IRR (Internet Routing Registry) services for route objects and AS policies
• Run the RPKI (Resource Public Key Infrastructure) for cryptographically validating IP address ownership — a key tool in preventing route hijacking
• Host policy development processes that are open to their members

IETF: Building the Technical Standards

The IETF (Internet Engineering Task Force) is the principal body for developing internet technical standards. It operates through:

• Working Groups — Organized by technical area (routing, transport, security, applications, etc.), each focused on specific protocol developments.
• RFCs (Request for Comments) — The canonical technical documents that define internet protocols. RFCs are numbered sequentially; important examples include RFC 791 (IPv4), RFC 793 (TCP), RFC 2460 (IPv6), RFC 7230 (HTTP/1.1), RFC 9110 (HTTP semantics).

The RFC Process

Anyone can submit an Internet-Draft to the IETF. The path to becoming a standards-track RFC involves:

1. Working group adoption and review
2. IETF Last Call (broader community review)
3. IESG (Internet Engineering Steering Group) approval
4. Final RFC publication by the RFC Editor

This process is open, transparent, and consensus-based — but can be slow. A complex protocol can take 5–10 years to reach full standard status.

IRTF and IAB

• IRTF (Internet Research Task Force) — Focuses on longer-term research topics; less prescriptive than IETF working groups.
• IAB (Internet Architecture Board) — Provides architectural oversight and long-range planning for the internet, oversees the RFC Editor, and nominates IETF leadership.

ITU: The UN Angle

The ITU (International Telecommunication Union) is a UN agency that coordinates global telecommunications standards and radio spectrum allocation. While the ITU is not a primary internet governance body, it has sought to expand its role — particularly around IP address policy and domain names.

Proposals to give the ITU more authority over internet governance have been controversial and consistently opposed by the technical community, large internet companies, and many governments, who prefer the existing multi-stakeholder model over a treaty-based intergovernmental approach.

ISOC: The Community Foundation

The Internet Society (ISOC) is a global non-profit founded in 1992 by Vint Cerf and Bob Kahn (two of the internet's founding figures). ISOC:

• Provides organizational home for the IETF
• Advocates for an open, globally connected, secure internet
• Operates chapters in 160+ countries
• Funds technical and policy initiatives in underserved regions

How It All Fits Together

The internet governance ecosystem can seem Byzantine, but the key insight is that different bodies govern different layers:

What	Who
Protocol standards (TCP/IP, HTTP, DNS)	IETF
IP address allocation	IANA → RIRs → ISPs
Domain name policy	ICANN
Root zone management	IANA (performed by Verisign for publication)
National/regional address allocation	RIRs
Routing security (RPKI)	RIRs
Spectrum and interoperability	ITU
Community advocacy	ISOC

This distributed model has both strengths and weaknesses. It is resilient and resistant to capture by any single interest, but also slow-moving and sometimes unable to address urgent problems quickly. Debates about internet governance — who should have authority, how quickly standards should evolve, how to balance openness with security — are ongoing and will shape the internet for decades to come.