Am 06.01.2018 um 17:18 schrieb Michael Ströder: > bert hubert wrote: >> We have done some very tentative measurements on the Linux Meltdown >> workaround & impact on DNS performance. > > Besides the performance impact of the "fixes" doesn't this mean that > people should stop doing DNSSEC signing on-the-fly on the authorative > server and move DNSSEC signing to isolated systems?
It depends on your DNS-usage. For static zones this is possible. But if you have somehow dynamic zones (e.g. geoDNS) then you usually use online-signing. regards Klaus _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users