[Opendnssec-develop] performance test

Matthijs Mekking matthijs at NLnetLabs.nl
Tue Mar 8 14:21:18 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have tried to sign a tld alike zone (1465431 RRs) on my machine today
with three different versions of OpenDNSSEC:
1. OpenDNSSEC 1.1.3
2. OpenDNSSEC 1.2.0
3. OpenDNSSEc trunk (revision 4527)

All three used SoftHSM as the dedicated HSM.

With version 1.1.3, it took me 53 minutes and 18 seconds to sign the
zone (51:44 signing, 200 signatures per second)

With version 1.2.0, it took me 44 minutes and 52 seconds to sign the
zone (42:02 signing, 246 signatures per second). It used up to almost
1GB of physical memory.

With trunk, it took me 46 minutes and 19 seconds to sign the zone (42:08
signing, 246 signatures per second). So not much worse than with 1.2.0.
The additional time is in calculating the differences (preparing
OpenDNSSEC for IXFR). It used up to almost 1GB of physical memory, so
not worse than 1.2.0.

Best regards,

Matthijs
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJNdjteAAoJEA8yVCPsQCW5LW0IAL+wIfdHUgLPy9egm4HtW1qM
N/NnW35RAZBJyJ2q8WT0xifJUbRGL6od4obJMdG/3ZskXGolSkWhSvq7+VPrqjV5
RWv0J3GxRkTFcchRd07i5MLLKCVP1UE2CYlI18vyT29ONEGzvdd/PIlBBLHi56qu
r8/rzR4PllxBSsPlqANeLyu/J9tgEck9SCtDi+x5TVCFrRzCA4u/Mark1FANc9fe
BGVWdTMne4HK8zuuNHLPsMEijtnUo+GTupeQj/N8vMRWs5S54mv2UF15vbW+bZe/
bx3Fkc4m7Fe7PCHVQfRZoSyt8FR4/peVvpt2qPawbUK42FKjqzt4tbxilih7QKU=
=WT+e
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list