Post #290714

Quite a number of people have asked why ‘dnst’ signs so much faster than ‘ldns’. I should note that we didn’t have performance as an initial design goal, just compatibility. So, we haven’t fully investigated the reasons for the difference. Some running theories are: - Though signing isn't multi-threaded yet, 'dnst’ does do multi-threaded sorting. - ‘ldns’ does NSEC chain building while loading the zone while ‘dnst’ loads and sorts it first then does the NSEC chain - 'dnst’ uses a sequential record store while 'ldns’ builds a tree - ‘ldns’ may be doing more work allocating memory - ‘dnst' can use the Rust ’ring’ crate for alg 13 signing instead of OpenSSL, which may boost performance #DNS #DNSSEC #OpenSource #rustlang https://fosstodon.org/@nlnetlabs/114630692456617001