Hi,
I have been testing signing large zones, but I found the signing speed was
depressing when it's not the first time to sign them.
Oct 16 11:30:15 index ods-signerd: [STATS] test2 RR[count=6001 time=49(sec)]
NSEC3[count=1998 time=1(sec)] RRSIG[new=3000 reused=721007 time=52(sec)
avg=57(sig/sec)] TOTAL[time=129(sec)]
Oct 16 11:30:15 index ods-signerd: [tools] notify nameserver ok
Oct 16 11:30:15 index ods-signerd: [STATS] test RR[count=6001 time=48(sec)]
NSEC3[count=1997 time=0(sec)] RRSIG[new=2999 reused=725292 time=53(sec)
avg=56(sig/sec)] TOTAL[time=129(sec)]
Oct 16 11:30:15 index ods-signerd: [tools] notify nameserver ok
Oct 16 11:30:15 index ods-signerd: [STATS] test3 RR[count=6001 time=48(sec)]
NSEC3[count=1998 time=0(sec)] RRSIG[new=3000 reused=721007 time=52(sec)
avg=57(sig/sec)] TOTAL[time=129(sec)]
Oct 16 11:30:17 index ods-signerd: [tools] notify nameserver ok
Oct 16 11:30:17 index ods-signerd: [STATS] test4 RR[count=6001 time=50(sec)]
NSEC3[count=1994 time=1(sec)] RRSIG[new=2995 reused=721012 time=51(sec)
avg=58(sig/sec)] TOTAL[time=131(sec)]
Oct 16 11:30:18 index ods-signerd: [tools] notify nameserver ok
Oct 16 11:30:18 index ods-signerd: [STATS] test1 RR[count=6001 time=53(sec)]
NSEC3[count=1995 time=0(sec)] RRSIG[new=2996 reused=722615 time=49(sec)
avg=61(sig/sec)] TOTAL[time=132(sec)]
Oct 16 10:06:35 index ods-signerd: [STATS] test RR[count=2143361 time=75(sec)]
NSEC3[count=361144 time=8(sec)] RRSIG[new=722291 reused=0 time=192(sec)
avg=3761(sig/sec)] TOTAL[time=285(sec)]
If the zone was newly imported, the avg could be up to 3700(sig/sec) in my
server, but the speed would drop dramatically when resigning, why?
Best regards,
Stuart
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
