On Fri, Jan 07, 2011 at 09:19:17PM +0800, jerry.du wrote:
> Hi guys,
>
> I installed an authoritative PDNS server. Server configure 4 x Xero 3.4
> CPU, 4G memory. I used 16 mysql bankend threads. But only get around 40K qps
> every time with queryperf.
Somewhere around 50kqps there is a bottlen
On Fri, Jan 07, 2011 at 11:39:59AM +0100, bert hubert wrote:
> On Fri, Jan 07, 2011 at 11:24:12AM +0100, Leen Besselink wrote:
>
> > But their is one part I'm missing a way to hook up an EPP-client for
> > sending the DS-record to the parent-zone.
>
> This could be added to pdnssec perhaps - is t
On Fri, Jan 07, 2011 at 11:24:12AM +0100, Leen Besselink wrote:
> A (possibly hidden) supermaster which does all the DNSSEC signing and
> the superslaves which only do
> zone-trasfers and no online DNSSEC-signing but do understand enough of
> the protocol to be able to serve it.
This scenario is s
On 01/06/2011 08:00 PM, bert hubert wrote:
> On Thu, Jan 06, 2011 at 11:55:24AM -0500, Mathew Hennessy wrote:
>> Excellent! BTW, can PowerDNSSEC operate in the following way as one would
>> expect:
>>
>> PowerDNS supermaster which has DNSSEC RRs but doesn't do DNSSEC (aka
>> traditional PowerDNS)
would be an excellent "way into dnssec".
This wouldn't require any change to the existing (non-dnssec) powerdns setups,
and would allow us to test with "real" things, easily migrate single domains to
a dnssec setup (just change the nameservers), rollback when needed to the old
and tested setup
