On 05/26/2011 08:14 PM, Matthijs Mekking wrote: > Hi OpenDNSSEC users, Hi Matthjis,
> > I have done a little research on the memory usage that the OpenDNSSEC > signer daemon is taking. I have been generating TLD-ish zones with > different number of delegations (from 1 to 5.000.000, see Table 1). All > zones have 50 percent signed delegations. This is with the default > policy, so NSEC3, RSASHA256 keys. > > It looks to me that the signer daemon is using memory around 3 times the > size of the signed zone file. I acknowledge this looks a bit greedy. > > However, the question to the users is: > > a) Do you see this as a problem? All depends on the scale. Usually you will have your OpenDNSSEC process running side by side with a DNS server on the same box, so you need to dimension your memory requirements roughly to 4-5x the size of the zones you are signing. > > b) If so, can this problem be solved by buying more memory or do we need > to make other trade-offs in order to optimize the memory usage? Do you have any trade-off in mind to reduce the memory usage? Would such trade-offs adversely affect performance? > > > Thanks for your input. > > > Best regards, > > Matthijs > > > > Table 1. Size measurements of zones signed with OpenDNSSEC > > #NS unsigned signed VIRT MEM PHYS MEM > > 1 0.7 Kb 6.0 Kb 219 Mb 5.8 Mb > 10 3.0 Kb 14.7 Kb 219 Mb 5.8 Mb > 100 25 Kb 101 Kb 283 Mb 6.1 Mb > 1.000 227 Kb 464 Kb 283 Mb 7.4 Mb > 5.000 1149 Kb 4.5 Mb 285 Mb 21 Mb > 10.000 2308 Kb 9.0 Mb 286 Mb 38 Mb > 50.000 11.7 Mb 45.6 Mb 363 Mb 170 Mb > 100.000 23.4 Mb 91.0 Mb 507 Mb 334 Mb > 250.000 59.0 Mb 228.2 Mb 1074 Mb 827 Mb > 500.000 118.4 Mb 456.9 Mb 1.9 Gb 1.6 Gb > 1.000.000 237.6 Mb 915.2 Mb 3.5 Gb 3.2 Gb > 5.000.000 1.2 Gb 4.6 Gb 16.2 Gb 14 Gb _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
