Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


Here are some short recommendations if you are planning to use OpenDNSSEC with many zones or a single large zone, and where the speed of signing is important.

  • CPU: OpenDNSSEC is multi-threaded when it concerns the handling of multiple zone. But it is not currently zones and is also multi-threaded in the handling of a single zone. So a multi-core machine will not give any benefits if you plan to only run a single large zone.


    For handling a single large zone it is therefore more important to go with a CPU that is fast rather than a CPU with many cores.

    when it comes to handling refreshing the signatures of RRsets.

  •  Hardisk: The OpenDNSSEC signer engine makes backup files to recover your zone data with no loss. A backup file will use up one time the size of the signed zone on the HDD. If you use an inbound DNS adapter, the XFR is also stored on disk. If you use an outbound DNS adapter, a journal file is required. OpenDNSSEC will maintain three outbound changes on disk.

  • Memory: The zones are also stored in memory. The amount of memory is quite excessive, due to the use of ldns.