Important Performance Considerations for DNSSEC

Although DNSSEC introduces important security benefits, there are some impacts to deploying it.

Some impacts to consider when deploying DNSSEC are as follows:

Increased memory requirements—A DNSSEC zone may require as much as five times the memory on the Windows Server 2012 server as an unsigned zone.

Increased network traffic—A response to a DNS query against a DNSSEC zone will return additional DNSSEC records as compared to a unsigned zone and will increase the network traffic accordingly.

Increased processor utilization—The additional workload of validating DNSSEC zone data during queries can increase the processor load on the Windows Server 2012 server hosting the DNSSEC zone.

Increased ...

Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.