Current Issues
DNSSEC is hard
- Validator is the primary reason for missing original May 1 deadline
Performance sucks
- Not tuned
- DNSSEC’s ordering requirement has performance implications
- Expect 9.0.0 to be around 75% the performance of BIND 8.2.3 on same hardware
- Of course, BIND 8 can’t do multi-processor…