[Opendnssec-develop] Enforcer NG 50.000 zones

Yuri Schaeffer yuri at nlnetlabs.nl
Wed Oct 19 10:50:40 UTC 2011

> Got some problems testing this.
> 1. Created the zonelist
> 2. Start and setup the Enforcer
> 3. "ods-enforcer enforce" to start enforcing.
> 4. Got an error.

I'm not seeing the same behaviour. I see other problems, but no crashes.
A quick 50.000 test:
  - enforce command returned in 4 seconds. Note: not enough keys 
available, so 49.996 zones did not introduce any keys. (with excessive 
logging at took 10 seconds)
  - adding zone 50.001 and run update zonelist: 3 seconds

the bad:
- keys are being reused
- the enforcer does not do its best to generate enough keys
- return times are waaaay in to the future.


More information about the Opendnssec-develop mailing list