[Opendnssec-user] OpenDNSSEC with more than 13, 000 signatures per second
Rickard Bellgrim
rickard.bellgrim at iis.se
Fri Mar 11 13:24:49 UTC 2011
Hi
We have been working with multithreaded signing for v1.3. So that you can maximize the performance of your HSM when signing a single zone. It is available in the trunk and testing shows us that you can sign e.g. .se in less than 3 minutes with NSEC or around 1 minute using NSEC3 OptOut.
[STATS] se RR[count=2322389 time=46(sec)] NSEC[count=998562 time=20(sec)] RRSIG[new=1002849 reused=0 time=74(sec) avg=13552(sig/sec)] TOTAL[time=170(sec)]
More information is available here:
http://www.opendnssec.org/2011/03/11/more-than-13000-signatures-per-second/
// Rickard
More information about the Opendnssec-user
mailing list