RE: NSEC3 salt change - temporary performance decline

2020-01-23 Thread Niels Haarbo via bind-users
, January 21, 2020 4:41 PM To: Niels Haarbo Cc: bind-users@lists.isc.org Subject: Re: NSEC3 salt change - temporary performance decline Hi Niels, > On 21 Jan 2020, at 15:43, Niels Haarbo via bind-users > wrote: > > Hello BIND users > > Our DNSSEC signer changes NSEC3

NSEC3 salt change - temporary performance decline

2020-01-21 Thread Niels Haarbo via bind-users
Hello BIND users Our DNSSEC signer changes NSEC3 salt every 30 days. The signer resigns all the relevant records and the zone is transferred using IXFR to the authoritative servers (6 nodes). Two of the 6 authoritative servers (BIND 9.11.13 and 9.11.14) are affected by a performance decline

Bootstrap inline signing

2019-01-18 Thread Niels Haarbo via bind-users
Is it supported to bootstrap inline signing using dnssec-signzone?   $ named-compilezone -f text -F raw -o example.raw example.com example.text   $ dnssec-signzone -S -K /etc/bind/keys -O raw -3 ABCDEF -H 19 -A -o example.com -f example.raw.signed  example.text and then load the two files