Re: BIND with RPZ - CPU Affinity

2013-09-02 Thread Arie L. Putra
ditto,

thank for the tips, indeed our team missed the --enable-threads (build from 
source, previously just using ubuntu pre-built 9.8.1)
after enable it we found that the CPU usage is spread across all 24 CPU.


Thanks, really appreciate it.





Best Regards, 



Arie Lendra Putra 

陈维文 




-- 

Together is a beautiful word, 

Coming together is the Beginning, Keeping together is Progress 

Thinking together is Unity, Working together is Success 
- Original Message -
From: Michael McNally mcna...@isc.org
To: bind-users@lists.isc.org
Sent: Saturday, August 31, 2013 12:09:17 AM
Subject: Re: BIND with RPZ - CPU Affinity

On 8/30/13 2:45 AM, Arie Lendra Putra wrote:

 2x Xeon (total seen by OS 24CPU)
 16GB RAM
 Ubuntu Server 12.04

 We test limited number RPZ list BIND 9.8.1 (came with Ubuntu 12.04), and
 put it on the live network, the result is OK, all load is shared among
 24 CPU, @10% usage

 Then in response to BIND Security Advisory (exploit), we upgraded it to
 9.8.5-P2, and we increase  to RPZ list to a huge list (1,3M blacklist)

 But now the CPU load is seem to focus only on CPU0 (40%), and remaining
 CPU (1-23) only around 2%

 Any idea what may seems to be the problem,

Did you build the 9.8.5-P2 binaries yourself from ISC source or do you
know what configure options were used?  (If you're not sure, you can
check by running named -V)

You might check to make sure that threads are enabled, or enable them
explicitly with ./configure --enable-threads (+whatever other options
you built with previously) before re-building the source.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

BIND with RPZ - CPU Affinity

2013-08-30 Thread Arie Lendra Putra
All,

 

Recently we put live some DNS Servers, 

 

The spec: 

2x Xeon (total seen by OS 24CPU)

16GB RAM
Ubuntu Server 12.04

 

We test limited number RPZ list BIND 9.8.1 (came with Ubuntu 12.04), and put
it on the live network, the result is OK, all load is shared among 24 CPU,
@10% usage

Then in response to BIND Security Advisory (exploit), we upgraded it to 9.8.
5-P2, and we increase  to RPZ list to a huge list (1,3M blacklist)

 

But now the CPU load is seem to focus only on CPU0 (40%), and remaining CPU
(1-23) only around 2%

 

Any idea what may seems to be the problem, 

 

 

Best Regards,

 

Arie Lendra Putra 

陈维文

Description: Calligraphy

--

Together is a beautiful word,

Coming together is the Beginning, Keeping together is Progress

Thinking together is Unity, Working together is Success

 

image001.png___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND with RPZ - CPU Affinity

2013-08-30 Thread Michael McNally

On 8/30/13 2:45 AM, Arie Lendra Putra wrote:


2x Xeon (total seen by OS 24CPU)
16GB RAM
Ubuntu Server 12.04

We test limited number RPZ list BIND 9.8.1 (came with Ubuntu 12.04), and
put it on the live network, the result is OK, all load is shared among
24 CPU, @10% usage

Then in response to BIND Security Advisory (exploit), we upgraded it to
9.8.5-P2, and we increase  to RPZ list to a huge list (1,3M blacklist)

But now the CPU load is seem to focus only on CPU0 (40%), and remaining
CPU (1-23) only around 2%

Any idea what may seems to be the problem,


Did you build the 9.8.5-P2 binaries yourself from ISC source or do you
know what configure options were used?  (If you're not sure, you can
check by running named -V)

You might check to make sure that threads are enabled, or enable them
explicitly with ./configure --enable-threads (+whatever other options
you built with previously) before re-building the source.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users