I need help with some understanding of DNSSEC and packet sizes.
I have heard The root DNS servers will complete turning on DNSSEC on 5th May and there is the potential for issues for our customers and/or increased load on our DNS servers because of the increase in size of the DNS responses when DNSSEC is enabled. Issues can be due to lack of support for
What are some of the things I need to make sure on my end, (i.e firewalls) that I am ready besides the DNSSEC setup. I also heard of EDNS0, is this mandatory to use this?
asked May 04 '10 at 01:51 AM in Default
From what I can see only the Dynect platform supports DNSSEC, Custom DNS doesn't yet list it as supported. If you're not on Dynect then you can (and indeed have to) ignore DNSSEC.
Note that unless you are an ISP there should be nothing for you to worry about.
answered May 04 '10 at 07:04 AM
Cry Havok ♦