[Opendnssec-user] Some issues with OpenDNSSEC 1.3.0 trunk

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

On 02/22/2011 05:47 AM, Sebastian Castro wrote:
> Hi,
> 
> I'm aware is a little bit too soon to expect a functional version, but
> based on the current trunk version I'd like to report:
> 
> - It seems this version is a memory hog. Running on a system with a 1-GB
> memory limit per process, ods-signerd reaches the limit quite fast
> (~30min) when signing a set of zones that includes two relatively large
> ones [*].

I have made some changes to trunk that tunes down the memory usage quite
a bit.

> - Also when a big zone is being signed, we get messages
> 
> [fifo] unable to push item: max cap reached
> 
> by thousands... then syslog starts complaining afterwards.
> 
> ods-signerd: last message repeated 1850109 times
> 
> When reaches this point, the signerd doesn't make any progress and has
> to be killed. We are currently testing with a FIFOQ_MAX_COUNT = 50000

The log message is tuned down to a log_debug level (Since we know that
this might happen, it should not be a warning).

> - In a few ocassions, we have ended with empty signed zones. A
> 'ods-signer clear', 'ods-signer sign' has helped.

This is strange, and should not happen. However, the trunk goes through
a lot of changes and might therefore be a bit unstable. But, please
notify us if it happens again, preferably with at a more detailed level.

Thanks for your report.

Best regards,
  Matthijs

> 
> [*] Large zones: around 50,000 resource records on the unsigned zone,
> delegation centric, few DS records, NSEC3 Opt-out.
> 
> 
> I hope it helps...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJNZ3i+AAoJEA8yVCPsQCW5HpwH/2WD+eVqDIE2njII6m0fEQ10
nJu0MYmu3zvJbFIPBVuvkFpdEJnuTz9asofHnBA5/U0Q2w/2xjRq0KtBZ6HO/5IQ
YI0S1I0S2Gz5WaVZ+BWMPSGCdLkijw6ftsMYffr3W+/lZfDxiI1dSXdGsDBPMTFs
cZyuFiQya2ISBTRCi6M++7DwIJDQDSJZNq4GnIgglJnreukIHWXnpjfhPICZnbV3
neHUDjxxOElq76+xI6jg4WWTBVu53HOSLg95mKzKEdFMt9uBMRhubQxhTcTGPDVC
LQzx845ral1Gc/qTQQSDNE4VeidgOW1n2DQJfQArJdN3pYdjAs0bTTc+QbTCz34=
=aJoz
-----END PGP SIGNATURE-----