Practices Check your named's statistics rndc stats dump file (named.stats) is created under running dir Perform queryperf against your server any changes with or without 'enable-dnssec yes'? any packet loss? check the server load while queryperf is running with ps(1)