Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • Knot DNS Knot DNS
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 20
    • Issues 20
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 5
    • Merge requests 5
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Knot projects
  • Knot DNSKnot DNS
  • Merge requests
  • !818

Nsec sign changesets

  • Review changes

  • Download
  • Patches
  • Plain diff
Merged Libor Peltan requested to merge nsec_sign_changesets into master Sep 06, 2017
  • Overview 0
  • Commits 6
  • Pipelines 19
  • Changes 16

This shall speed up small updates to big signed zone.

The previous procedure is:

  • recreate all the NSEC(3) records in the zone
  • compare to the existing NSEC(3) records, making a diff
  • sign this diff

The new procedure is:

  • recreate only NSEC(3) records (neighbouring to) records mentioned in the changeset
  • sign the changed records

The observed total speed-up of a little zone update to a huge signed zone was around 15%, but there are also other problems not related to NSEC(3) chain reconstruction.

Fixes #119 (closed)

Edited Sep 08, 2017 by Libor Peltan
Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: nsec_sign_changesets