BIND Performance with Huge RPZ

[Arie L. Putra]

Dear All, 

We are building a server for recursive DNS Server, this server will be acted as a cache for our network. (several user-side DNS Server will forward to this server) 
Using Ubuntu Server with latest BIND version, we are trying to have RPZ incuded in this BIND, with around 800k blacklisted sites. 

Has anyone have experience, how RPZ with huge list will impact BIND performance, will it reduce DNS response time? we have six DNS server that will point to this server, each server is serving about 15Mbps of DNS Traffic on peak hour. 

this server is a Ubuntu box with 2 Xeon (total of 12 core, 24 if include HT), 16GB RAM. 


Appreciate any information given. 





Best Regards, 



Arie Lendra Putra 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130712/320b75ab/attachment.html>