Estimate zone file size, server memory and zone transfer time from your record counts and DNSSEC state.
Zone file size is simply the record count times the average line length, while in-memory representation costs more per record because of indexes and pointers. DNSSEC roughly doubles a zone because every RRset gains a signature, and the NSEC or NSEC3 chain adds records of its own. Large signed zones dominate secondary start-up time and AXFR bandwidth, and a zone that no longer fits in memory turns every query into a disk read.
DNS Zone Size
zone bytes = total records × average bytes per record, plus roughly 180 bytes per record of RRSIG when DNSSEC is signed.
AXFR transfer time
transfer time = zone transfer bytes × 8 ÷ bandwidth
zone bytes = total records × average bytes per record, plus roughly 180 bytes per record of RRSIG when DNSSEC is signed. Zone file size is simply the record count times the average line length, while in-memory representation costs more per record because of indexes and pointers. DNSSEC roughly doubles a zone because every RRset gains a signature, and the NSEC or NSEC3 chain adds records of its own.
Large signed zones dominate secondary start-up time and AXFR bandwidth, and a zone that no longer fits in memory turns every query into a disk read.
This calculator takes 7 inputs: A records, AAAA records, CNAME records, MX, TXT, SRV and other records, Average bytes per zone-file line, Zone is DNSSEC signed, Transfer bandwidth. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.