[dns-operations] DNSSEC query statistics

[Alexander Gall]

Hello Sebastian

Here are the DSC graphs for the last 7 days from a.nic.ch, serving CH.
The rate for DNSSEC qtypes is far below the 1% mark.  We don't track
NSEC3 (yet) but that rate is basically 0 (as it should be, the only
NSEC queries we get are currently coming from one particular address
of the Amazon EC2 cloud in a futile attempt to enumerate the CH zone,
I guess). In case you're wondering, we didn't see any significant
impact on performance (I/O, CPU) after enabling DNSSEC w/ NSEC3
(without opt-out) for CH last September.

Regards,
Alex

On Thu, 08 Jul 2010 17:58:38 +1200, Sebastian Castro <sebastian at nzrs.net.nz> said:

> Hi:
> Any of the members of the list would be so kind to share statistics with
> the percentage of DNSSEC-related queries your nameservers are receiving?

> I have reasonable numbers for a non-DNSSEC from the root and .nz, but
> I'm interested in the characteristics of DNSSEC traffic to make some
> realistic benchmarking.

> For example, the usual proportion of traffic we see is around 52%
> A-queries, 33% MX-queries, 10% AAAA-queries, 1%NS queries and the
> remaining 4% various types. So if you can provide similar numbers but
> including DNSSEC query types (DNSKEY, DS, RRSIG, perhaps NSEC/NSEC3) I
> would greatly appreciate it.


> cheers,
> -- 
> Sebastian Castro
> DNS Specialist
> .nz Registry Services (New Zealand Domain Name Registry Limited)
> desk: +64 4 495 2337
> mobile: +64 21 400535
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-------------- next part --------------
A non-text attachment was scrubbed...
Name: qtypes-dnssec.png
Type: image/png
Size: 5276 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20100708/a35bf15d/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: qtypes.png
Type: image/png
Size: 5073 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20100708/a35bf15d/attachment-0001.png>