[Opendnssec-develop] PropagationDelay

Rickard Bondesson rickard.bondesson at iis.se
Fri Oct 9 10:28:56 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> what are resonable default values for Zone and Parent PropagationDelay
> ?
> the current - PT9999S - is not...

If a registrant want to change something in our zone it takes maximum:

2 h (EPP -> zone generation . We generate the zone every second hour)
15 min (zone generation -> dnssec -> distribution points)
15 min (distribution points -> secondaries . Maximum time according to contract. Usually takes 3 min)

So 9000 seconds

If we want to change something in the root zone, it takes around 3 to 5 days.

But other zones would be faster

// Rickard

-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSs8QaOCjgaNTdVjaAQg3fgf/RwLbBzR0eOFS7Z5zIFqDdUXtc1wNAIqd
66W3YBWMLe5RmFWeVwvlP551VNmQBK1uUZxzZT6Z5vK+c8LXqFIVXEy0s4B1VI1W
9zDJ+cq5SBO8L90hJYShzyzxYKHl2NtqPu5ET1BnJ+I2Xj8VxB0TJ/t496/FUUYx
Cj9jj2S6ZMm98TCnqbg/28aUEdZoUp/hrE7pO75pyZbpsQaFdHPltmzOKunDV8en
epJ4DY7i5fu6lspEoK8a1Jpd0Gn+gpYL8scQQWZqW0acOcC+PlbSgunqL1cWwLTL
qLEJ0rllIgLr0Ghb0Q1mVPlW36guNpNxf9yieoWCflcgKvovMPhw0w==
=LDRO
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20091009/1fdbf63c/attachment.htm>


More information about the Opendnssec-develop mailing list