Elektrine lite

← Feed

@mnordhoff@infosec.exchange

2026-10-05 21:29 UTC

Verisign says: "Today, we are processing more than 746 billion authoritative DNS transactions on average per day (and growing), which equates to approximately 8.6 million transactions per second, every second of every day." The funny thing about (basic, static) DNS is that that sounds like a lot but you can do 8.6 million authoritative queries per second on one moderately-powerful server. (Though Verisign would need a few hundred gigs of RAM. A little less once they delete your domain names for no reason!) Dynamic stuff is more expensive. You could run most critical global DNS infrastructure on one decent server. There are reasons not to, of course. Might be harder for Verisign given the .com zone size. IDK. But still. https://www.verisigninformed.com/article/introducing-verisign-informed/ via https://domainnamewire.com/2026/10/05/verisign-announces-verisign-informed-applies-for-pki-top-level-domain/ (Verisign hosts that domain on Cloudflare authoritative DNS, though.) (Verisign's net income is over $800 million per year. They are raising .com domain prices November 1.)

Replies (1)

  • @mnordhoff@infosec.exchange 2026-10-05 21:47

    Jeez, DNS has gotten faster since last I looked. https://www.knot-dns.cz/benchmark-400G/ Knot DNS with XDP can do 70 million qps even with DNSSEC (positive responses I guess).

    Open ##4938144