This article compares the performance of UDP, TCP, and DoT for DNS traffic in an Identity Management (IdM) environment under sustained high load. We explore a stress scenario with a standard client generating over 1,000 DNS queries per second against an IdM DNS server, and assess the impact of encryption on DNS performance.

Rhdev is a blog and resource hub dedicated to Ruby on Rails development, a popular web application framework written in Ruby. Developers can explore tutorials, best practices, and case studies for building web applications with Ruby on Rails. Additionally, Rhdev covers topics such as ActiveRecord ORM, RESTful APIs, and frontend integration using JavaScript frameworks, offering insights for both beginners and experienced Rails developers.

Red Hat Developer

Performance benchmarking of DNS protocols (UDP, TCP, DNS over TLS) in Red Hat Identity Management under sustained high load reveals UDP achieves 70-75k QPS with sub-4ms tail latency, TCP delivers 55-60k QPS with sub-5ms latency, and DoT provides 50-52k QPS with sub-7ms latency. The tests use dnsperf to generate 1000+ queries per second against an IdM server running RHEL 10.1, with metrics collected via Prometheus exporters and visualized in Grafana. Results show DoT introduces approximately 30% throughput reduction compared to UDP while maintaining stable, predictable latency, making it viable for zero-trust architectures where encryption is mandatory.

Performance and load testing in Identity Management (IdM) systems using encrypted DNS (eDNS)