Saturday, April 10, 2021

Measuring DNS performance impact by IDS

Hello Everyone!
Our company's router vendor offers a "security" suite for additional $$$ per year and management is interested in giving it a try. We get one month free trial. One of the major components of the security suite is an IDS engine. I want to find out how it affects our throughput and other gotchas.

The documentation says it monitors DNS traffic in addition to other protocols. How do I measure DNS pps? I was able to test TCP and UDP performance using iperf but not DNS. Testing UDP isn't enough because DNS has additional parsing/checking involved.



No comments:

Post a Comment