Multithreaded signing support for OpenDNSSEC

Published: Mon 14 March 2011
Last updated: Mon 15 April 2024

We have changed the design so that RRsets are added to a signing queue, where a pool of signer threads (called drudgers) grab a signing task and perform it. With the SCA6000 HSM we now reach maximum performance, meaning OpenDNSSEC can do a 13.000+ signatures per second. The .se zone can now be signed in 2 minute 50 seconds, of which 1 minute 14 seconds are signing operations.

Related links:

general news