‘dnst' is about twice as fast as ‘ldns’ for #DNSSEC signing. This is our result with a test zone containing about 10M RRs, and using ECDSAP256SHA256 algorithm 13.
Note that for our upcoming signer-pipeline Nameshed we'll make signing multi-threaded, boosting performance even more. #DNS #OpenSource #rustlang https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/
NLnet Labs
npub1qy…9rffr
2025-06-05 12:12:36 UTC
Author Public Key
npub1qyqtcu2yp540xnc6l6znm7npnlwm6pn47fpjnwtw66plhwrkcddq89rffrSeen on
wss://relay.ditto.pubPublished at
2025-06-05 12:12:36 UTCEvent JSON
{
"id": "3da818adeed7401a296459b5b473f798423a37d1f8c0c6d5ae599a19aaa03e8d",
"pubkey": "0100bc71440d2af34f1afe853dfa619fddbd0675f24329b96ed683fbb876c35a",
"created_at": 1749125556,
"kind": 1,
"tags": [
[
"t",
"dnssec"
],
[
"t",
"dns"
],
[
"t",
"opensource"
],
[
"t",
"rustlang"
],
[
"proxy",
"https://fosstodon.org/users/nlnetlabs/statuses/114630692456617001",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.mostr.pub"
]
],
"content": "‘dnst' is about twice as fast as ‘ldns’ for #DNSSEC signing. This is our result with a test zone containing about 10M RRs, and using ECDSAP256SHA256 algorithm 13. \n\nNote that for our upcoming signer-pipeline Nameshed we'll make signing multi-threaded, boosting performance even more. #DNS #OpenSource #rustlang https://blog.nlnetlabs.nl/introducing-dnst-a-dns-toolbox-for-network-operators/",
"sig": "cbc4fc2fad8766d8b372c2ae5bb8be31157c285cf72ba649d8f9b53ccd9abf8117d955f3c7106325a31c50f8b7b0af62003033387dd4e6f6675e7ea0b4bc784a"
}