Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

DNSSEC Deployment Planning


Updated: February 11, 2014

Applies To: Windows Server 2012 R2, Windows Server 2012

The following topics provide planning guidance. Review the information in these topics before you sign a DNS zone with DNSSEC:

  • Why DNSSEC: Consider the reasons why you want to deploy DNSSEC. Possible reasons include protection against spoofing attacks and compliance with government corporate policies.

  • Stage a DNSSEC Deployment: Before you fully deploy DNSSEC in a production environment, try signing a test zone.

  • DNSSEC Performance Considerations: DNSSEC signing and validation requires processor resources on DNS servers. DNSSEC-signed zones and DNS responses are also larger in size, requiring additional disk and network resources.

  • DNSSEC Requirements: Before you deploy DNSSEC, verify that your DNS infrastructure meets specifications.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2015 Microsoft