1 Dub
2020
1 Dub
'20
13:36
Hi Gao,
The zone signing performance depends on more aspects (HW, zone contents,
DNSSEC configuration).
Give it a try and you will see that Knot DNS is the right choice for you :-D
Tip: don't overlook
https://www.knot-dns.cz/docs/2.9/singlehtml/index.html#signing-threads).
Best,
Daniel
On 4/1/20 1:23 PM, gao wrote:
Dear Anand ,
Thank you very much for reply.
Yeah, I do plan to install the KNOT DNS and have a test.
And I just want to get a general idea about how fast it signs before getting hands dirty
:)
Best Regards!
------------------ 原始邮件 ------------------
*发件人:* "Anand Buddhdev"<anandb(a)ripe.net>ipe.net>;
*发送时间:* 2020年4月1日(星期三) 晚上7:17
*收件人:* "gao"<41566941@qq.com>;"knot-dns-users"<knot-dns-users@lists.nic.cz>;
*主题:* Re: [knot-dns-users] About the signing performance
On 01/04/2020 13:09, gao wrote:
Hi Gao,
Dear KNOT team,
We're now considering an update on our zone signer and KNOT DNS seems to be a good
choice.
I looked through your documentation and do not see the performace
data about signing big zones.
When the zone has about 10 millions entries , how long will it take
for KNOT DNS to sign it completely?
This depends on many things, such as the number of CPUs available, their
clock frequency, signing algorithm, etc.
Why don't you just install Knot on a test server, and configure it with
your zone, and see how it takes? Then read the documentation about
tuning some of the signing parameters, if you feel the need to improve
performance.
Regards,
Anand Buddhdev