<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I’m testing a bind9 v11.1.0-P5 server signing 8 small zones de novo with
<span style="font-size:10.0pt;font-family:"Helvetica",sans-serif">ECDSAP256SHA256. The process takes about 12 hours to complete vs. signing with RSASHA256, which is almost immediate, but signing is ultimately successful. The server is running Ubuntu 16.04 LTS
with current patches. I don’t see any indication of resource starvation. I understand that ECDSAP256SHA256 is more computationally intensive than RSASHA256. Is bind9 throttling the signing process? Is such throttling configurable?</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1017A8">Jeffry A. Spain
</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1017A8">• Network Administrator<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt;font-family:Symbol;color:#00B0F0">----------------------------------------------------------------------</span></b><b><span style="font-size:8.0pt;color:#00B0F0"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1118A7">Cincinnati Country Day School • 6905 Given Road, Cincinnati, OH 45243-2898<o:p></o:p></span></p>
<p class="MsoNormal"><a href="http://www.countryday.net/"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1118A7">CountryDay.net</span></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1118A7"> • 513 979-0299 • 513 527-7632
(f) (UTC-5)<o:p></o:p></span></p>
<p class="MsoNormal"><a href="https://keyserver.pgp.com/"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1118A7">PGP Public Key</span></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1118A7"> ID 0xD17AFA13 (4E7B 8F1E
F541 43E2 85D3 3638 76AB 9A4B D17A FA13)<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>