Here are some short recommendations if you are planning to use OpenDNSSEC with many zones or a single large zone, and where the speed of signing is important.
OpenDNSSEC is multi-threaded when it concerns the handling of multiple zone. But it is not currently multi-threaded in the handling of a single zone. So a multi-core machine will not give any benefits if you plan to only run a single large zone.
For handling on a single large zone is is therefore more important to go with a CPU that is fast rather than a CPU with many cores.
OpenDNSSEC has been tested on the following platforms:
OpenDNSSEC depends on a number of open-source packages, all of which must be installed on your system for OpenDNSSEC to build successfully.
The installation of depencencies guide shows which packages are required and how to download/install them.
You also need a Hardware Security Module.
Choose from any vendor that uses the PKCS#11 interface. Or the software-only implementation of an HSM called SoftHSM created by the OpenDNSSEC project. Follow these instructions on how to install SoftHSM.
You can find information about packages for your operating system here: http://www.opendnssec.org/download/packages/
The latest version of OpenDNSSEC can be found as a tarball on http://www.opendnssec.org
The development (unstable) version of OpenDNSSEC is available from the Subversion repository and can be obtained using the following command:
svn co http://svn.opendnssec.org/trunk/OpenDNSSEC OpenDNSSEC
If you downloaded the tarball then first untar it:
tar -xzf opendnssec-<VERSION>.tar.gz cd OpenDNSSEC
or if you are working from the repository:
cd OpenDNSSEC sh autogen.sh
Then it is time to configure the build scripts:
You may also need some other options to configure.
--disable-auditor Disable auditor build (default enabled) --enable-eppclient Enable eppclient build (default disabled) (experimental) --enable-timeshift For debugging purposes --with-database-backend Select database backend (sqlite3|mysql) (default sqlite)
Use the following command to find out which other options that are available:
The configure script defaults to --prefix=/usr/local, --sysconfdir=/etc, and --localstatedir=/var
Once configured, build OpenDNSSEC using:
... and install using ...
sudo make install
If the build fails it might be because of a missing software dependency. Please read the error messages carefully.
Depending on operating system, there may be a few additional steps required after installation.
Linux Users Linux users need to rebuild the dynamic linker caches. To do this, issue the command:
sudo ldconfig [library-path [library-path ...]]
If OpenDNSSEC or any of the pre-requisites were installed in non-standard directories, the list of library paths should be specified as arguments on the command line.