If I enable DNS SEC on my UTM, the volume of DNS traffic increases, because some or all of the traffic switches to TCP, and the amount of returned data per query increases as well. Since DNS performance is critical to everything else, and because every user and device contribute to the volume of DNS lookups, I have been reluctant to make the switch.
Has someone out there measured bandwidth usage and response time, before and after implementing DNS SEC in their organization? I don't even know how to estimate the risk, other than to turn it on and wait for things to break.
This thread was automatically locked due to age.