[dnssec-deployment] Dnssec Impact reporting: Authorative servers (draft 0.5)

[Olaf M. Kolkman]

On Mon, 13 Jun 2005 17:12:22 -0400
Ólafur Guðmundsson <ogud at ogud.com> wrote:

> 
> Here is a short draft on what should and should not be reported
> when measuring DNSSEC impact on authorative servers.
> 

What I miss from the document are actual tests on query-answer
performance, e.g. which fraction of packets are answered, network load
increase as soon as signed data is made available (30-40% of packets
on the net have the DO bit on, correct?). I will try to enumerate some
of those tests soon.

We plan to perform some of these tests using the DISTEL DNS lab (
http://www.ripe.net/ripe/meetings/ripe-42/presentations/ripe42-dns-distel/)
somewhere within the pre-IETF timeframe. The DISTEL lab has been set
up by the RIPE NCC and NLnetLabs to perform NSD regression tests and replays
packet traces real-time.

BTW, as a data point. We are kicking our DNSSEC deployment project
into high gear. I expect we'll put up a page with milestones and such
up in a week or two.



-- Olaf

---------------------------------| Olaf M. Kolkman
---------------------------------| RIPE NCC
---------------------------------| JID: olaf at jabber.secret-wg.org