Re: [nznog] Validating resolvers for DNS and DNSSEC

On 11/02/2014, at 1:21 pm, Tony Wicks wrote:

10,000+ customers resolving with DNSSEC enabled caches and we have noticed no issues with it. The only thing we had to do is disable the DNS sec error logging as it was a lot of noise.

category dnssec { null; };

dnssec-enable yes; dnssec-validation auto; dnssec-lookaside auto;

Error logging isn’t something I’d want to ignore. What sort of errors were you seeing? — Nathan Ward