Speaker
Otto Moerbeek
(PowerDNS/Open-XChange)
Description
Since version 4.5 PowerDNS Recursor implements an aggressive NSEC/NSEC3 cache, as described in RFC8198. Other recursive resolvers also have an aggressive NSEC/NSEC3 cache implementation.
We will discuss the effectiveness of an aggressive cache for both NSEC and NSEC3 zones. It turns out that especially the NSEC3 results need extra study.
Primary author
Otto Moerbeek
(PowerDNS/Open-XChange)