I have 8 threads configured, anyone know why unbound would
do all the work in just one thread?
Build info:
# /usr/local/sbin/unbound -h
[...]
Version 1.7.1
linked libs: libevent 2.1.8-stable (it uses kqueue), OpenSSL 1.0.2o 27 Mar
2018
linked modules: dns64 respip validator iterator
[...]
Configuration below my signature, stats below (the machine is
running the DANE adoption survey, so yes, ~3.5 billion queries with
a low cache hit rate is right):
# /usr/local/sbin/unbound-control stats_noreset | egrep -v '=0$'
thread0.recursion.time.avg=0.000000
thread1.recursion.time.avg=0.000000
thread2.recursion.time.avg=0.000000
thread3.recursion.time.avg=0.000000
thread4.recursion.time.avg=0.000000
thread5.recursion.time.avg=0.000000
thread6.recursion.time.avg=0.000000
thread7.num.queries=3478975092
thread7.num.cachehits=1422530
thread7.num.cachemiss=3477552562
thread7.num.recursivereplies=3477552317
thread7.requestlist.avg=257.029
thread7.requestlist.max=1266
thread7.requestlist.current.all=245
thread7.requestlist.current.user=245
thread7.recursion.time.avg=0.220082
thread7.recursion.time.median=0.0963222
total.num.queries=3478975092
total.num.cachehits=1422530
total.num.cachemiss=3477552562
total.num.recursivereplies=3477552317
total.requestlist.avg=257.029
total.requestlist.max=1266
total.requestlist.current.all=245
total.requestlist.current.user=245
total.recursion.time.avg=0.220082
total.recursion.time.median=0.0120403
--
Viktor.
Configuration:
# find /usr/local/etc/unbound/ -name '*.conf' -print0 |
xargs -0 cat |
pcregrep -v '^\s*(#|$)'
server:
username: unbound
directory: /usr/local/etc/unbound
chroot: /usr/local/etc/unbound
pidfile: /usr/local/etc/unbound/unbound.pid
auto-trust-anchor-file: /usr/local/etc/unbound/root.key
server:
domain-insecure: "fserver.org"
stub-zone:
name: "."
stub-addr: <slave root zone server>
stub-first: yes
stub-zone:
name: "arpa"
stub-addr: <slave arpa zone server>
stub-first: yes
server:
verbosity: 0
module-config: "validator iterator"
minimal-responses: yes
qname-minimisation: no
cache-max-ttl: 7200
cache-max-negative-ttl: 1200
val-sig-skew-min: 3600
val-sig-skew-max: 3600
harden-algo-downgrade: no
num-threads: 8
msg-cache-slabs: 8
rrset-cache-slabs: 8
infra-cache-slabs: 8
key-cache-slabs: 8
key-cache-size: 256m
rrset-cache-size: 256m
msg-cache-size: 128m
neg-cache-size: 16m
jostle-timeout: 500
delay-close: 1500
interface: 127.0.0.1
interface: 192.168.1.1
so-reuseport: yes
access-control: 127.0.0.0/8 allow
access-control: 192.168.1.0/24 allow
edns-buffer-size: 8192
max-udp-size: 8192
do-not-query-localhost: yes
do-not-query-address: 127.0.0.1/8
do-not-query-address: ::1
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: yes
prefer-ip6: no
outgoing-range: 16384
num-queries-per-thread: 8192
outgoing-port-permit: 1024-65535
outgoing-port-avoid: 1-1023
outgoing-num-tcp: 256
incoming-num-tcp: 256
so-rcvbuf: 12m
so-sndbuf: 12m
infra-cache-numhosts: 100000
server:
unblock-lan-zones: yes
insecure-lan-zones: yes
remote-control:
control-enable: yes
control-interface: /usr/local/etc/unbound/unbound.ctl
control-use-cert: no
