Hi, Try decreasing maximum size of these databases: https://www.knot-dns.cz/docs/2.9/singlehtml/index.html#database-section Also if you can add build time options, add --with-conf-mapsize=10 configure parameter.
Best, Daniel On 3/1/20 5:22 PM, aeris wrote: > Hi, > > I try to use knot 2.9.2 on a Raspiberry Pi 2 with 1Gb of RAM under Arch Linux. > > When I enable DNSSec (ecdsap256sha256 algorithm), I got > > mars 01 16:09:05 exegol knotd[3438]: error: [aeris.eu.org.] DNSSEC, failed to > initialize (not enough memory) > mars 01 16:09:05 exegol knotd[3438]: error: [aeris.eu.org.] zone event 'load' > failed (not enough memory) > mars 01 16:09:05 exegol knotd[3438]: error: [xxx.eu.org.] DNSSEC, failed to > initialize (not enough memory) > mars 01 16:09:05 exegol knotd[3438]: error: [xxx.eu.org.] zone event 'load' > failed (not enough memory) > mars 01 16:09:05 exegol knotd[3438]: error: [imirhil.fr.] DNSSEC, failed to > initialize (not enough memory) > mars 01 16:09:05 exegol knotd[3438]: error: [imirhil.fr.] zone event 'load' > failed (not enough memory) > > Those 3 zones are quite damned small (286, 19 & 16 lines), 2 containing only > minimalistic entries (1 SOA, 2 NS, 3 CAA, 2 CNAME & 1 TLSA). > > I try to activate zones one at a time, loading the 16 lines zone is ok but > loading the 19 lines one too generate the same "not enough memory" for both > zones. Loading only the 19 lines zone is ok. > > I don't understand how DNSSec requires so many memory to not be able to load > such small zones. > > When zones are loaded without DNSSec, knot memory is under 80MB. > > How I can trace the memory usage of Knot to understand why this behavior? > Is there any way to restrict Knot memory to be able to load such zones? > > Regards, > >
signature.asc
Description: OpenPGP digital signature
-- https://lists.nic.cz/mailman/listinfo/knot-dns-users
