[Pdns-users] Meltdown impact on PowerDNS/dnsdist

Mon Jan 8 07:55:20 UTC 2018

Am 06.01.2018 um 17:18 schrieb Michael Ströder:
> bert hubert wrote:
>> We have done some very tentative measurements on the Linux Meltdown
>> workaround & impact on DNS performance.
> 
> Besides the performance impact of the "fixes" doesn't this mean that
> people should stop doing DNSSEC signing on-the-fly on the authorative
> server and move DNSSEC signing to isolated systems?

It depends on your DNS-usage. For static zones this is possible. But if
you have somehow dynamic zones (e.g. geoDNS) then you usually use
online-signing.

regards
Klaus