[afnog] Root Zone DNSSEC Deployment Technical Status Update

[Phil Regnauld]

Joe Abley (joe.abley) writes:
> 
> Note that only a tiny handful of the $BIGNUM zones on the Internet are signed at present, however, so the practical increase in traffic due to DNSSEC today (or in July) will be small.

	... if you enable DNSSEC validation, note.

> If you want to estimate the potential impact in the far distant future when all zones are signed, you could always see how much DNS traffic you exchange with the world today and determine what the impact would be if that traffic doubled (in terms of bits sent as responses).

	Yes, set up DSC or capture all traffic on port 53 to get a general idea.

	Using NFSen is another easy way to do it.

	Cheers,
	Phil