How to measure the impact of enabling DNSSEC?

[Augie Schwer]

Would measuring the number of SERVFAIL entries in the "query-errors"
category be a good indicator of what impact enabling DNSSEC has?

I am replaying some production traffic at a test instance; once with DNSSEC
enabled and once with it disabled and then counting the number of entries
logged via the query-errors category to get an indication of what impact
enabling DNSSEC on my production hosts would be.

Is this a good way to measure? Is there a better way?


-- 
Augie Schwer    -    Augie at Schwer.us    -    http://schwer.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130122/64cac656/attachment.html>