-
Type:
Improvement
-
Status: Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: 2.3
-
Component/s: None
-
Labels:None
The signer has been designed to keep large zones signed where per run of the signer there is a significant amount of signatures per zone to be refreshed.
There are a number of performance and features;
- IXFR input for OpenDNSSEC allows only for one simultanous transfer to occur at the time.
- The entire zone file is written for each time a zone is getting signed.
- The signer performs multiple iterations over the full zone contents, even though only a few
RRsets have been changed.
1.
|
integration tests currently break [in-progress] |
|
Open | Unassigned |
2.
|
additional non-normal cases of fast update api [done] |
|
Open | Unassigned |
3.
|
document internal interface further [done] |
|
Open | Unassigned |
4.
|
multi-threaded testing incoming fast updates [replanned] |
|
Open | Unassigned |
5.
|
more finegrained recycling of signatures [to-do] |
|
Open | Unassigned |
6.
|
full pass on signconf reload, resalt, or NSEC roll [replanned] |
|
Open | Unassigned |
7.
|
statistics reporting [in progress] |
|
Open | Unassigned |
8.
|
logging per fast update [done] |
|
Open | Unassigned |
9.
|
fast update direct execution and passthrough [done] |
|
Open | Unassigned |
10.
|
IXFR in probably uses twice amount of memory as necessary [to-do] |
|
Open | Unassigned |
11.
|
reimplement clear command [to-do] |
|
Open | Unassigned |
12.
|
capping TTLs to MaxZoneTTL and single TTL for rrsets [to-do] |
|
Open | Unassigned |
13.
|
nextserial always higher than input serial? [to-do] |
|
Open | Unassigned |
14.
|
more selective entizing of domain names [to-do] |
|
Open | Unassigned |