[Opendnssec-develop] Indexes on tables

Matthijs Mekking matthijs at NLnetLabs.nl
Mon Oct 4 14:37:40 CEST 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Sion,

Using sqlite3 and a purged softHSM, this is very slow:

> ods-hsmutil purge softHSM
> echo "yes" | ods-ksmutil setup
> ods-control start
> cd /svn/opendnssec/dnssec/trunk/testing
> perl zonegen.pl --zonename dennisbier.nl --nzones 5000 --nrr 2 \
  --pns 0 --pa 100 --paaaa 10 --addtoksm --no-xml --policy default \
  --output ./unsigned --config ./signconf --signeroutput ./signed
> ods-ksmutil zonelist export > zonelist.xml

(move the zonelist file and unsigned, signed and signconf directories to
the desired locations)

> kill -HUP `cat enforcer.pid`

About 2 new signer configurations per minute are outputted on Ubuntu
10.04 (2GB memory, 2x 1.6GHz processor).

Best regards,

Matthijs


On 10/01/2010 04:35 PM, Sion Lloyd wrote:
> Hi there.
> 
> It looks like the slow steps in a lot of the enforcer bulk transactions were 
> not in the database. E.g. adding zones speeds up when you don't write to the 
> zonelist xml file each time.
> 
> I have a story to add indexes where needed... can anyone give me an example of 
> an operation that gets slow when the kasp database grows large? Otherwise I 
> don't really know where to start with this one.
> 
> Cheers,
> 
> Sion
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJMqcqUAAoJEA8yVCPsQCW5/lIIANRV7beWXlLY7C7p/HFo5Ho3
VRlofX1wcno6ijLChQe1wmIBYfu/vUp+W8gz1inyxaBPs7vJbT+AMRysqduCIuGk
7B1iwU6Zu+mgs7UsiHeIkqYJilpXqQg8NnHUj1GCTQ8Rz5/O9CVphTdSTtI+Yh6M
IXhYXss3bmCgSr4wzArfy6L4HQoR5/kJRXc11OUVZDohsTbiPZVdG/fBw61hodn7
YmBm5BCYK6QKla8DhYacdK8kO1VqJH+AFRyDVnmKebtP+138MzwhHrSlZ5AzDUxo
7RzF3xd2Q68wQzj407SfBKhasIg6gTEejhMFlfAuzyAyk7hO9kZBWO+OP7mABAI=
=rjyR
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list