Jul 30 – 31, 2022
Sheraton Philadelphia Downtown
US/Eastern timezone

Performance effects of DNSSEC validation on a busy resolver

Jul 30, 2022, 3:15 PM
Liberty D (Sheraton Philadelphia Downtown)

Liberty D

Sheraton Philadelphia Downtown

201 North 17th Street Philadelphia PA 19103 United States
Standard Presentation Main Session OARC 38 Day 1


Petr Špaček (Internet Systems Consortium (ISC))


Traditionally DNSSEC how-tos start with a variation of:

Be prepared for higher resource consumption when you enable DNSSEC validation.

Is that still true in 2022? According to our measurements - not really.

In this talk, we compare answer latency, resolver CPU usage, memory consumption, and network bandwidth between validating and non-validating configurations of a busy ISP resolver running BIND.

Presentation delivery Remotely (online)

Primary author

Petr Špaček (Internet Systems Consortium (ISC))

Presentation materials