overview dnssec -...

Overview DNSSEC

Performance More…

Overview

Overview DNSSEC

Performance More…

Overview DNSSEC

Performance More…

Overview DNSSEC

Performance More…

Overview DNSSEC

Performance More…

Overview DNSSEC

Performance More…

DNSSEC

Overview DNSSEC

Performance More…

Overview DNSSEC

Performance More…

Latest RFCs NSEC3 Support

RSA/SHA-2, ECDSA Signing

Automated Trust Anchor Rollover

Support for 3rd Party Key Management (HSMs)

ENABLING ENTERPRISE DNSSEC ROLLOUT

Overview DNSSEC

Performance More…

Support for Online Zone Signing. Sign/unsign/change DNSSEC settings on a live

zone

Add/remove records dynamically on a signed zone

Active Directory Integrated Support for dynamic updates

Preserving the multi-master DNS model

Leverage AD for secure key distribution and Trust Anchor distribution

Dynamic Update support is available for file backed zones as well

Improved DNS/DNSSEC server performance

ENABLING ENTERPRISE DNSSEC ROLLOUT

Overview DNSSEC

Performance More…ENABLING ENTERPRISE DNSSEC ROLLOUT

Automated re-signing on static and dynamic updates

Automated key rollovers

Automated signature refresh

Automated updating of secure delegations

Automated distribution and updating of Trust Anchors - RFC 5011

ENABLING ENTERPRISE DNSSEC ROLLOUT

Overview DNSSEC

Operations More…

Performance

Overview DNSSEC

Performance More…

100 99.9987 98.993

92.332

72.03

0

20

40

60

80

100

120

50000 75000 120000 200000 280000

Pe

rce

nta

ge

Re

spo

nd

ed

by

Win

DN

S

QPS

Percentage Queries Responded

Overview DNSSEC

Performance More…

Overview DNSSEC

Performance More…

0.00

1.00

2.00

3.00

4.00

5.00

6.00

7.00

0.00

50.00

100.00

150.00

200.00

250.00

300.00

350.00

Nodes/second signed Memory factor

Overview DNSSEC

Performance More…

http://lists.msft.net

Questions Suggestions

Feedback ?