overview dnssec -...
TRANSCRIPT
Overview DNSSEC
Performance More…
Overview
Overview DNSSEC
Performance More…
Overview DNSSEC
Performance More…
Overview DNSSEC
Performance More…
Overview DNSSEC
Performance More…
Overview DNSSEC
Performance More…
DNSSEC
Overview DNSSEC
Performance More…
Overview DNSSEC
Performance More…
Latest RFCs NSEC3 Support
RSA/SHA-2, ECDSA Signing
Automated Trust Anchor Rollover
Support for 3rd Party Key Management (HSMs)
ENABLING ENTERPRISE DNSSEC ROLLOUT
Overview DNSSEC
Performance More…
Support for Online Zone Signing. Sign/unsign/change DNSSEC settings on a live
zone
Add/remove records dynamically on a signed zone
Active Directory Integrated Support for dynamic updates
Preserving the multi-master DNS model
Leverage AD for secure key distribution and Trust Anchor distribution
Dynamic Update support is available for file backed zones as well
Improved DNS/DNSSEC server performance
ENABLING ENTERPRISE DNSSEC ROLLOUT
Overview DNSSEC
Performance More…ENABLING ENTERPRISE DNSSEC ROLLOUT
Automated re-signing on static and dynamic updates
Automated key rollovers
Automated signature refresh
Automated updating of secure delegations
Automated distribution and updating of Trust Anchors - RFC 5011
ENABLING ENTERPRISE DNSSEC ROLLOUT
Overview DNSSEC
Operations More…
Performance
Overview DNSSEC
Performance More…
100 99.9987 98.993
92.332
72.03
0
20
40
60
80
100
120
50000 75000 120000 200000 280000
Pe
rce
nta
ge
Re
spo
nd
ed
by
Win
DN
S
QPS
Percentage Queries Responded
Overview DNSSEC
Performance More…
Overview DNSSEC
Performance More…
0.00
1.00
2.00
3.00
4.00
5.00
6.00
7.00
0.00
50.00
100.00
150.00
200.00
250.00
300.00
350.00
Nodes/second signed Memory factor
Overview DNSSEC
Performance More…
http://lists.msft.net
Questions Suggestions
Feedback ?