Re: [nznog] Validating resolvers for DNS and DNSSEC

On 11 February 2014 14:37, Pete Mundy wrote:

Straight after the conference, I enabled validation on a resolver that handles in excess of 2 million queries/day.

So far I have no negative impact to report either :)

I support Andy & Dean's comments. Just turn it on already!

Our experience matches too, our two recursive resolvers combined have a similar load to that of Pete's. We've been running recursive resolvers in excess of 6 months now. Our audience is mostly hosted servers and VMs who don't tend to complain about inability to view cat pictures, we have not had problems with resolver service. +1 for DNSSEC enabled resolvers! Thanks, -- Mark Goldfinch | Systems Team Leader MODICA GROUP nz: +64 4 498 6000