30–31 Jul 2022
Sheraton Philadelphia Downtown
US/Eastern timezone

Performance effects of DNSSEC validation on a busy resolver

30 Jul 2022, 15:15
25m
Liberty D (Sheraton Philadelphia Downtown)

Liberty D

Sheraton Philadelphia Downtown

201 North 17th Street Philadelphia PA 19103 United States
Standard Presentation Main Session OARC 38 Day 1

Speaker

Petr Špaček (Internet Systems Consortium (ISC))

Description

Traditionally DNSSEC how-tos start with a variation of:

Be prepared for higher resource consumption when you enable DNSSEC validation.

Is that still true in 2022? According to our measurements - not really.

In this talk, we compare answer latency, resolver CPU usage, memory consumption, and network bandwidth between validating and non-validating configurations of a busy ISP resolver running BIND.

Presentation delivery Remotely (online)

Primary author

Petr Špaček (Internet Systems Consortium (ISC))

Presentation materials