x
all questions login
General DNS & Domains Dyn Email Update Clients

Question on DNSSEC

I need help with some understanding of DNSSEC and packet sizes.

I have heard The root DNS servers will complete turning on DNSSEC on 5th May and there is the potential for issues for our customers and/or increased load on our DNS servers because of the increase in size of the DNS responses when DNSSEC is enabled. Issues can be due to lack of support for

  1. TCP transport of DNS.
  2. UDP fragmentation for responses larger than the network MTU
  3. Non-fragmented UDP responses larger than 512 bytes

What are some of the things I need to make sure on my end, (i.e firewalls) that I am ready besides the DNSSEC setup. I also heard of EDNS0, is this mandatory to use this?

more ▼

asked May 04 '10 at 01:51 AM in Default

richsark gravatar image

richsark
1 1 1 1

Cry Havok gravatar image Cry Havok ♦ Jun 16 '10 at 08:15 PM

Originator has not returned to the question in over a month. Closing to stop the forum bot bumping it.

(comments are locked)
10|600 characters needed characters left

2 answers: sort voted first

I note that DNSSEC is now live for .org. My .org domain resolves just fine, I assume you aren't having any problems?

You may also want to read this article.

more ▼

answered May 05 '10 at 05:34 PM

Cry Havok gravatar image

Cry Havok ♦
78.7k 14 28 278

(comments are locked)
10|600 characters needed characters left

From what I can see only the Dynect platform supports DNSSEC, Custom DNS doesn't yet list it as supported. If you're not on Dynect then you can (and indeed have to) ignore DNSSEC.

Note that unless you are an ISP there should be nothing for you to worry about.

more ▼

answered May 04 '10 at 07:04 AM

Cry Havok gravatar image

Cry Havok ♦
78.7k 14 28 278

(comments are locked)
10|600 characters needed characters left
Your answer
toggle preview:

Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

© 1998-2013  Dynamic Network Services Inc.  -  Legal Notices  -  Privacy Policy  -  Contacts