Update benchmarks: auth typical setups

benchmarks.md

@@ -120,4 +120,30 @@ Just a short list of the most important ones. Not a full list by a long shot.
 - journal configuration
   - [ixfr-from-differences](https://bind9.readthedocs.io/en/latest/reference.html#namedconf-statement-ixfr-from-differences)
   - [max-journal-size](https://bind9.readthedocs.io/en/latest/reference.html#namedconf-statement-max-journal-size)
-  - storage properties - mainly IOPS
+  - storage properties - mainly IOPS
+
+### Typical setups
+Test primary and secondaries for each scenario. Example values as known on 2024-09-25.
+
+- TLD
+  - couple large zones
+  - DNSSEC signed
+  - infrequent but large updates (often DNSSEC resigning)
+  - mostly delegation hits - see e.g. [CZ stats](https://stats.nic.cz/dashboard/en/Traffic.html)
+- DNS hosting
+  - lots of mostly small zones
+    - possibly unsigned or signed, depends on users
+    - wide range in # of zones, in range of 100 - 2M
+  - most zones static
+  - small but frequent-ish updates
+  - reconfig possibilities
+    - catalog zone
+    - rndc addzone
+    - file change & rndc reconfig
+- root
+  - small number of small zones (root, arpa, etc.)
+    - NSEC signed
+  - read only
+  - lots of NXDOMAIN traffic, see e.g. [ITHI stats](https://ithi.research.icann.org/graph-m3.html)
+  - see [RSSAC 002 stats](https://www.dns.icann.org/rssac/rssac002/)
+  - roughly 70 % of DO=1 queries, see e.g. [ITHI stats](https://ithi.research.icann.org/graph-m3.html)