ods-hsmspeed(1)

💖 ods-hsmspeed — the OpenDNSSEC HSM speed tester 💖

okay bestie, so this is ods-hsmspeed(1) — a manual page, but make it a vibe check. it's the OpenDNSSEC HSM speed tester, and honestly? it's giving "let me clock your hardware" energy. 🕐✨

✨ SYNOPSIS ✨

ods-hsmspeed [-c config] -r repository [-i iterations] [-s keysize] [-t threads]

that's it, that's the whole lineup. -r is the only one that's not optional, no cap. 🫶

🌸 DESCRIPTION 🌸

so ods-hsmspeed is a lil utility that ships as part of OpenDNSSEC, and its whole job is to test how fast your configured HSMs actually are. performance check, basically. speedrun the HSM. 🔥

here's the lore: the components of OpenDNSSEC do not talk directly to the HSMs. instead they go through an internal library called libhsm, and that is what talks to the HSMs using PKCS#11. libhsm is the middleman that simplifies the whole process of creating keys and signatures for the other OpenDNSSEC components. it's the group chat admin of the crypto world, lowkey. 💅

ods-hsmspeed measures speed by using libhsm. and heads up, bestie — the result you get will be somewhat lower than what the manufacturers promise, because libhsm adds some overhead on top of the pure PKCS#11 environment. it's not broken, it's just extra steps. 😭 the overhead is real and it is part of the deal, fr fr.

🎀 OPTIONS 🎀

• -c config — path to an OpenDNSSEC configuration file.
  • (defaults to /etc/opendnssec/conf.xml — that's the standard spot, iykyk) 📁
• -i iterations — specify the number of iterations for signing an RRset. a higher number of iterations will increase the performance.
  • (defaults to 1 iteration — just one lil round to start) 🔁
• -r repository — the speed test will be performed on this repository.
  • this one is required, there's no default, so don't forget it bestie 💀
• -s keysize — a temporary RSA key with the given keysize will be used for signing.
  • (defaults to 1024 bit) 🔑
• -t threads — the number of threads to use. most HSMs will be utilized better with multiple threads.
  • (defaults to 1 thread — single-threaded main character energy, but you can absolutely give it more 👑)

👀 SEE ALSO 👀

go read these too, they're all iconic in their own way:

• ods-control(8)
• ods-enforcerd(8)
• ods-enforcer(8)
• ods-hsmutil(1)
• ods-kaspcheck(1)
• ods-signer(8)
• ods-signerd(8)
• ods-timing(5)
• ods-kasp(5)
• ods-hsmspeed(1)
• opendnssec(7)
• http://www.opendnssec.org/

🦋 AUTHORS 🦋

ods-hsmspeed was written by Jakob Schlyter and Nominet as part of the OpenDNSSEC project. absolute legends, we stan. 🫶

and that's a wrap, bestie 💖 this page is from OpenDNSSEC, dated February 2010, and it lives at section ods-hsmspeed(1). go measure some speeds, slay, and remember: the numbers are lower than the box says, and that's just libhsm doing its thing. periodt. 💅✨