[dns-operations] Automatic key verification / CERT in DNS / RFC4398 (Was: [Announce] GnuPG 1.4.3 released)

[Olaf M. Kolkman]

Hi Brad,

You wrote:
> 	I'm familiar with NSD.  It is very fast, but also quite memory
> intensive.  There were some interesting reports at RIPE from the
> folks responsible for SUNET, which is secondary to some of the
> largest ccTLD zones in the world, and how they were unable to fit all
> the necessary data into very large quantities of memory on their
> server (something like 64GB of RAM?).
>
> 	Do you know of any machines that can have terabytes of RAM
> available to store that much data?


I would like to see the reference to this, as these measurements  
might be outdated.

Besides I would like to refer you and other readers to recent numbers  
in http://www.ripe.net/ripe/docs/ripe-352.html#sec:memload where  
memory consumption of NSD and named are measured as part of an  
investigation of the effect of deploying DNSSEC at the RIPE NCC.

In Dutch we say "meten is weten". (To measure is to know).

--Olaf




-----------------------------------------------------------
Olaf M. Kolkman
NLnet Labs
http://www.nlnetlabs.nl/



-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 227 bytes
Desc: This is a digitally signed message part
Url : /pipermail/attachments/20060406/eea63256/PGP-0001.pgp