Hi Gao, The zone signing performance depends on more aspects (HW, zone contents, DNSSEC configuration).
Give it a try and you will see that Knot DNS is the right choice for you :-D Tip: don't overlook https://www.knot-dns.cz/docs/2.9/singlehtml/index.html#signing-threads). Best, Daniel On 4/1/20 1:23 PM, gao wrote: > Dear Anand , > > Thank you very much for reply. > > Yeah, I do plan to install the KNOT DNS and have a test. > > And I just want to get a general idea about how fast it signs before getting > hands dirty :) > > Best Regards! > > ------------------ 原始邮件 ------------------ > *发件人:* "Anand Buddhdev"<[email protected]>; > *发送时间:* 2020年4月1日(星期三) 晚上7:17 > *收件人:* "gao"<[email protected]>;"knot-dns-users"<[email protected]>; > *主题:* Re: [knot-dns-users] About the signing performance > > On 01/04/2020 13:09, gao wrote: > > Hi Gao, > >> Dear KNOT team, >> >> We're now considering an update on our zone signer and KNOT DNS seems to be >> a good choice. >> >> I looked through your documentation and do not see the performace >> data about signing big zones. >> >> When the zone has about 10 millions entries , how long will it take >> for KNOT DNS to sign it completely? > > This depends on many things, such as the number of CPUs available, their > clock frequency, signing algorithm, etc. > > Why don't you just install Knot on a test server, and configure it with > your zone, and see how it takes? Then read the documentation about > tuning some of the signing parameters, if you feel the need to improve > performance. > > Regards, > Anand Buddhdev > -- https://lists.nic.cz/mailman/listinfo/knot-dns-users
