Systems and methods for pre-signing of DNSSEC enabled zones into record sets

A system, comprising:

• a network interface coupled with a resolver that transmits a question associated with a set of domain names for a zone, the domain name operating under a domain name system with security extensions (DNSSEC);
• a domain name system (DNS) device supporting a set of zones of a DNS network, the DNS device comprising a processor and a memory device storing a set of instructions that, when executed by the processor, controls the DNS device to perform operations comprising:
• communicating with the resolver via the network interface, the instructions comprising:
• accessing a set of policies for operation of the domain name system (DNS);
• generating a set of answers to a plurality of questions associated with the set of zones of a domain name, wherein based on the set of policies, a first question of the plurality of questions corresponds to a plurality of answers in the set of answers;
• generating a set of signed answers from the set of answers and a set of key data;
• storing the set of signed answers as records in a zone file;
• receiving, via the DNS network, the question from the resolver;
• retrieving a signed answer from the stored set of signed answers based on the question and the set of policies;
• and
• transmitting, via the DNS network, the signed answer to the resolver,
• wherein the records in the zone file comprise a plurality of records storing the plurality of answers corresponding to the first question, each of the plurality of records storing a respective one of the plurality of answers.