<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 16px; font-family: Calibri, sans-serif; ">
<div>
<div><font class="Apple-style-span" face="Consolas,monospace">May not be precisely what you are looking for but check out <a href="http://bit.ly/RJ7WmS">http://bit.ly/RJ7WmS</a> </font></div>
<div style="font-family: Consolas, monospace; font-size: 16px; "><br>
</div>
</div>
<div style="font-family: Consolas, monospace; font-size: 16px; ">I would say that CPU utilization will not decrease, but that's pretty obvious. ;-) So there is a difference. We (at Comcast) knew IPv6 and DNSSEC were coming around the same time so we did that
after a planned upgrade/replacement of servers and network elements. I'd need to do some investigation into our production data if this was interesting for others to know.</div>
<div style="font-family: Consolas, monospace; font-size: 16px; "><br>
</div>
<div style="font-family: Consolas, monospace; font-size: 16px; ">- Jason</div>
<div style="font-family: Consolas, monospace; font-size: 16px; "><br>
</div>
<div style="font-family: Consolas, monospace; font-size: 16px; "><br>
</div>
<div style="font-family: Consolas, monospace; font-size: 16px; ">On 9/9/12 12:54 PM, "Stephane Bortzmeyer" <<a href="mailto:bortzmeyer@nic.fr">bortzmeyer@nic.fr</a>> wrote:</div>
<div style="font-family: Consolas, monospace; font-size: 16px; "><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="font-family: Consolas, monospace; font-size: 16px; border-left-color: rgb(181, 196, 223); border-left-width: 5px; border-left-style: solid; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 5px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 5px; ">
<div>There are many published papers about the load created by DNSSEC on</div>
<div>authoritative name servers. And a lot of practical experience as well,</div>
<div>some of it publically documented.</div>
<div><br>
</div>
<div>For the validating *resolvers*, I find on the Web a few tests in a lab</div>
<div>environment (setting up BIND or Unbound with and without validation,</div>
<div>and launching many DNS requests at them and measuring the differences)</div>
<div>but I do not find data about *actual* deployments, for instance an ISP</div>
<div>publishing the results of enabling validation ("We observed no</div>
<div>difference" or "We had to triple the number of boxes used as resolvers</div>
<div>because of the increased CPU load"). Any pointer?</div>
<div><br>
</div>
<div><br>
</div>
<div>_______________________________________________</div>
<div>dns-operations mailing list</div>
<div><a href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a></div>
<div><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a></div>
<div>dns-jobs mailing list</div>
<div><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-jobs">https://lists.dns-oarc.net/mailman/listinfo/dns-jobs</a></div>
<div><br>
</div>
</blockquote>
</body>
</html>