Groups > comp.protocols.dns.bind > #15828

Re: NSEC3 salt change - temporary performance decline

From	Cathy Almond <cathya@isc.org>
Newsgroups	comp.protocols.dns.bind
Subject	Re: NSEC3 salt change - temporary performance decline
Date	2020-06-09 13:29 +0100
Message-ID	<mailman.505.1591705750.942.bind-users@lists.isc.org> (permalink)
References	<VI1P189MB051293B66F040DE62BA705C5F20D0@VI1P189MB0512.EURP189.PROD.OUTLOOK.COM> <7a21c2cf-24e2-432d-a7a5-162dee038e72@pernau.at> <e6b5c40a-86d7-279a-4105-5dc8620dc876@isc.org>

Show all headers | View raw

On 29/01/2020 11:50, Klaus Darilion wrote:
> Hello Niels!
> 
> Thanks for bringing this to attention. I have reported it before [1][2]
> without response.
> 
> We see this regulary. AFAIS it happens actually always, but if the IXFR
> is small, the performance decline is so short that you usually won't
> notice it.
> 
> The bigger the zonechange ie NSEC3 change, full resigning ....* the
> longer is the performance decline and you will notice it more often.
> 
> *we don't resalt or resign completele - but this is what several of our
> TLD customers do.
> 
> I hope it will be fixed soon, we already test other software.
> 
> regards
> Klaus
> 
> 
> [1] https://lists.isc.org/pipermail/bind-users/2018-March/099814.html
> [2] https://lists.isc.org/pipermail/bind-users/2019-March/101579.html

FYI this will be fixed in the June 2020 BIND releases (in 9.11.20,
9.16.4 and 9.17.2):

https://gitlab.isc.org/isc-projects/bind9/-/issues/1834

Cathy

Back to comp.protocols.dns.bind | Previous | Next | Find similar

Thread

Re: NSEC3 salt change - temporary performance decline Cathy Almond <cathya@isc.org> - 2020-06-09 13:29 +0100

csiph-web