Hi, I'm aware is a little bit too soon to expect a functional version, but based on the current trunk version I'd like to report:
- It seems this version is a memory hog. Running on a system with a 1-GB memory limit per process, ods-signerd reaches the limit quite fast (~30min) when signing a set of zones that includes two relatively large ones [*]. - Also when a big zone is being signed, we get messages [fifo] unable to push item: max cap reached by thousands... then syslog starts complaining afterwards. ods-signerd: last message repeated 1850109 times When reaches this point, the signerd doesn't make any progress and has to be killed. We are currently testing with a FIFOQ_MAX_COUNT = 50000 - In a few ocassions, we have ended with empty signed zones. A 'ods-signer clear', 'ods-signer sign' has helped. [*] Large zones: around 50,000 resource records on the unsigned zone, delegation centric, few DS records, NSEC3 Opt-out. I hope it helps... -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
