Export (0) Print
Expand All

DNSSEC Deployment Planning

Published: February 11, 2014

Updated: February 11, 2014

Applies To: Windows Server 2012, Windows Server 2012 R2

The following topics provide planning guidance. Review the information in these topics before you sign a DNS zone with DNSSEC:

  • Why DNSSEC: Consider the reasons why you want to deploy DNSSEC. Possible reasons include protection against spoofing attacks and compliance with government corporate policies.

  • Stage a DNSSEC Deployment: Before you fully deploy DNSSEC in a production environment, try signing a test zone.

  • DNSSEC Performance Considerations: DNSSEC signing and validation requires processor resources on DNS servers. DNSSEC-signed zones and DNS responses are also larger in size, requiring additional disk and network resources.

  • DNSSEC Requirements: Before you deploy DNSSEC, verify that your DNS infrastructure meets specifications.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2015 Microsoft