Hi: In our testing environment we have been checking and gathering the statistics printed by the signer to keep an eye on the system. We've found a few strange things for what haven't found an answer:
- Entries with 'RR[count=0 ...] ' for a non-empty zone. Those seem to occur when the signer reads the zone file to refresh signatures. When the zone is "fresh", the count is correct. - Should the sum of <N>+<U> extracted from RRSIG[new=<N> reused=<U> ..] match the total number of signatures in the zone <T>? We've found some strange cases where the numbers don't match, in particular <N>+<U> < <T> - Is there a particular reason why the time and rates are precise to the second? In the original patch to add some of that functionality (ref http://trac.opendnssec.org/ticket/20) I was using a time precision to the millisecond. In a production environment I think is useful to have higher precision. Finally, would be nice to have some documentation about what each stat means :) Regards, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
