1 Dub
2020
1 Dub
'20
13:09
Dear KNOT team,
We're now considering an update on our zone signer and KNOT DNS seems to be a good
choice.
I looked through your documentation and do not see the performace data about signing big
zones.
When the zone has about 10 millions entries , how long will it take for KNOT DNS to sign
it completely?
I'll appreciate it if you can give me a feedback.
Best Regards!
Gao
1 Dub
1 Dub
13:17
On 01/04/2020 13:09, gao wrote:
Hi Gao,
Dear KNOT team,
We're now considering an update on our zone signer and KNOT DNS seems to be a good
choice.
I looked through your documentation and do not see the performace
data about signing big zones.
When the zone has about 10 millions entries , how long will it take
for KNOT DNS to sign it completely?
This depends on many things, such as the number of CPUs available, their
clock frequency, signing algorithm, etc.
Why don't you just install Knot on a test server, and configure it with
your zone, and see how it takes? Then read the documentation about
tuning some of the signing parameters, if you feel the need to improve
performance.
Regards,
Anand Buddhdev
13:23
New subject: 回复： About the signing performance
Dear Anand ,
Thank you very much for reply.
Yeah, I do plan to install the KNOT DNS and have a test.
And I just want to get a general idea about how fast it signs before getting hands dirty
:)
Best Regards!
------------------ 原始邮件 ------------------
发件人: "Anand Buddhdev"<anandb(a)ripe.net&gt;ipe.net>;
发送时间: 2020年4月1日(星期三) 晚上7:17
收件人: "gao"<41566941@qq.com>;"knot-dns-users"<knot-dns-users@lists.nic.cz>;
主题: Re: [knot-dns-users] About the signing performance
On 01/04/2020 13:09, gao wrote:
Hi Gao,
> Dear KNOT team,
>
> We're now considering an update on our zone signer and KNOT DNS seems to be a
good choice.
>
> I looked through your documentation and do not see the performace
> data about signing big zones.
>
> When the zone has about 10 millions entries , how long will it take
> for KNOT DNS to sign it completely?
This depends on many things, such as the number of CPUs available, their
clock frequency, signing algorithm, etc.
Why don't you just install Knot on a test server, and configure it with
your zone, and see how it takes? Then read the documentation about
tuning some of the signing parameters, if you feel the need to improve
performance.
Regards,
Anand Buddhdev
13:35
New subject: 回复： About the signing performance
I guess it might be roughly tens of minutes.
Dne 01.04.20 v 13:23 gao napsal(a):
Dear Anand ,
Thank you very much for reply.
Yeah, I do plan to install the KNOT DNS and have a test.
And I just want to get a general idea about how fast it signs before
getting hands dirty :)
Best Regards!
------------------ 原始邮件 ------------------
*发件人:* "Anand Buddhdev"<anandb(a)ripe.net>ipe.net>;
*发送时间:* 2020年4月1日(星期三) 晚上7:17
*收件人:* "gao"<41566941@qq.com>;"knot-dns-users"<knot-dns-users@lists.nic.cz>;
*主题:* Re: [knot-dns-users] About the signing performance
On 01/04/2020 13:09, gao wrote:
Hi Gao,
Dear KNOT team,
We're now considering an update on our zone signer and KNOT DNS
seems to be a
good choice.
I looked through your documentation and do not see the performace
data about signing big zones.
When the zone has about 10 millions entries , how long will it take
for KNOT DNS to sign it completely?
This depends on many things, such as the number of CPUs available, their
clock frequency, signing algorithm, etc.
Why don't you just install Knot on a test server, and configure it with
your zone, and see how it takes? Then read the documentation about
tuning some of the signing parameters, if you feel the need to improve
performance.
Regards,
Anand Buddhdev
13:37
New subject: 回复： 回复： About the signing performance
see that , we'll have a test , thanks
------------------ 原始邮件 ------------------
发件人: "libor.peltan"<libor.peltan@nic.cz>;
发送时间: 2020年4月1日(星期三) 晚上7:35
收件人: "knot-dns-users"<knot-dns-users@lists.nic.cz>;"gao"<41566941@qq.com>;
主题: Re: [knot-dns-users] 回复： About the signing performance
I guess it might be roughly tens of minutes.
Dne 01.04.20 v 13:23 gao napsal(a):
Dear Anand ,
Thank you very much for reply.
Yeah, I do plan to install the KNOT DNS and have a test.
And I just want to get a general idea about how fast it signs before
getting hands dirty :)
Best Regards!
------------------ 原始邮件 ------------------
发件人: "Anand Buddhdev"<anandb(a)ripe.net&gt;ipe.net>;
发送时间: 2020年4月1日(星期三) 晚上7:17
收件人: "gao"<41566941@qq.com>;"knot-dns-users"<knot-dns-users@lists.nic.cz>;
主题: Re: [knot-dns-users] About the signing performance
On 01/04/2020 13:09, gao wrote:
Hi Gao,
> Dear KNOT team,
>
> We're now considering an update on our zone signer and KNOT
DNS seems to be a good choice.
>
> I looked through your documentation and do not see the
performace
> data about signing big zones.
>
> When the zone has about 10 millions entries , how long will it
take
> for KNOT DNS to sign it completely?
This depends on many things, such as the number of CPUs available,
their
clock frequency, signing algorithm, etc.
Why don't you just install Knot on a test server, and configure it
with
your zone, and see how it takes? Then read the documentation about
tuning some of the signing parameters, if you feel the need to improve
performance.
Regards,
Anand Buddhdev
13:36
New subject: 回复： About the signing performance
Hi Gao,
The zone signing performance depends on more aspects (HW, zone contents,
DNSSEC configuration).
Give it a try and you will see that Knot DNS is the right choice for you :-D
Tip: don't overlook
https://www.knot-dns.cz/docs/2.9/singlehtml/index.html#signing-threads).
Best,
Daniel
On 4/1/20 1:23 PM, gao wrote:
Dear Anand ,
Thank you very much for reply.
Yeah, I do plan to install the KNOT DNS and have a test.
And I just want to get a general idea about how fast it signs before getting hands dirty
:)
Best Regards!
------------------ 原始邮件 ------------------
*发件人:* "Anand Buddhdev"<anandb(a)ripe.net>ipe.net>;
*发送时间:* 2020年4月1日(星期三) 晚上7:17
*收件人:* "gao"<41566941@qq.com>;"knot-dns-users"<knot-dns-users@lists.nic.cz>;
*主题:* Re: [knot-dns-users] About the signing performance
On 01/04/2020 13:09, gao wrote:
Hi Gao,
Dear KNOT team,
We're now considering an update on our zone signer and KNOT DNS seems to be a good
choice.
I looked through your documentation and do not see the performace
data about signing big zones.
When the zone has about 10 millions entries , how long will it take
for KNOT DNS to sign it completely?
This depends on many things, such as the number of CPUs available, their
clock frequency, signing algorithm, etc.
Why don't you just install Knot on a test server, and configure it with
your zone, and see how it takes? Then read the documentation about
tuning some of the signing parameters, if you feel the need to improve
performance.
Regards,
Anand Buddhdev
1726
days inactive
1726
days old
5 comments
4 participants
participants (4)
-
Anand Buddhdev -
Daniel Salzman -
gao -
libor.peltan