, January 21, 2020 4:41 PM
To: Niels Haarbo
Cc: bind-users@lists.isc.org
Subject: Re: NSEC3 salt change - temporary performance decline
Hi Niels,
> On 21 Jan 2020, at 15:43, Niels Haarbo via bind-users
> wrote:
>
> Hello BIND users
>
> Our DNSSEC signer changes NSEC3
Hello BIND users
Our DNSSEC signer changes NSEC3 salt every 30 days. The signer resigns all the
relevant records and the zone is transferred using IXFR to the authoritative
servers (6 nodes).
Two of the 6 authoritative servers (BIND 9.11.13 and 9.11.14) are affected by a
performance decline
Is it supported to bootstrap inline signing using dnssec-signzone?
$ named-compilezone -f text -F raw -o example.raw example.com
example.text
$ dnssec-signzone -S -K /etc/bind/keys -O raw -3 ABCDEF -H 19 -A -o
example.com -f example.raw.signed example.text
and then load the two files
3 matches
Mail list logo