Performance

• RSA vs ECDSA in CoreDNS DNSSEC plugin: The CPU Cost of Signing NXDOMAINs 2025-10-29

  On-the-fly DNSSEC signing of negative responses is dramatically cheaper with ECDSA than RSA in CoreDNS. This benchmark showcases how RSA burns 30x the amount of CPU time compared to ECDSA for the same load, confirming CoreDNS's guidance to prefer ECDSA.