[Opendnssec-user] Memory usage

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi OpenDNSSEC users,

I have done a little research on the memory usage that the OpenDNSSEC
signer daemon is taking. I have been generating TLD-ish zones with
different number of delegations (from 1 to 5.000.000, see Table 1). All
zones have 50 percent signed delegations. This is with the default
policy, so NSEC3, RSASHA256 keys.

It looks to me that the signer daemon is using memory around 3 times the
size of the signed zone file. I acknowledge this looks a bit greedy.

However, the question to the users is:

a) Do you see this as a problem?

b) If so, can this problem be solved by buying more memory or do we need
to make other trade-offs in order to optimize the memory usage?


Thanks for your input.


Best regards,

Matthijs



Table 1. Size measurements of zones signed with OpenDNSSEC

#NS             unsigned        signed          VIRT MEM        PHYS MEM

        1       0.7 Kb          6.0 Kb          219 Mb          5.8 Mb
       10       3.0 Kb          14.7 Kb         219 Mb          5.8 Mb
      100       25 Kb           101 Kb          283 Mb          6.1 Mb
    1.000       227 Kb          464 Kb          283 Mb          7.4 Mb
    5.000       1149 Kb         4.5 Mb          285 Mb          21 Mb
   10.000       2308 Kb         9.0 Mb          286 Mb          38 Mb
   50.000       11.7 Mb         45.6 Mb         363 Mb          170 Mb
  100.000       23.4 Mb         91.0 Mb         507 Mb          334 Mb
  250.000       59.0 Mb         228.2 Mb        1074 Mb         827 Mb
  500.000       118.4 Mb        456.9 Mb        1.9 Gb          1.6 Gb
1.000.000       237.6 Mb        915.2 Mb        3.5 Gb          3.2 Gb
5.000.000       1.2 Gb          4.6 Gb          16.2 Gb         14 Gb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEbBAEBAgAGBQJN3gvtAAoJEA8yVCPsQCW5sHkH+Ott+dcEXSVeO3XFmjN/IoAy
jY4bbdPSSDYDXAVqROGJnNl4idyMcqCO+1jlzZmUIiOXKkWDVby+tPYHH0hZvHRl
c8Pt9Zlfg+1LYvBTqfHrS4QESvbu9Ze/hlb4aMSsfW3Wzoo2hPDlOIqAVMI9tD2V
8X/C39TKjbJMMxuOSwS5Rj7rUiUfuGoAKavMXHp2vZYT2Ts6yi1YQDNNbs4KPliI
2i5PqcwmuXxzWV5JDsGXIZGZAGQwghUhpbsyyF0S+E5aJG2kaGHf6vmCW8b79Ajm
AOPKpsXA9nEiCvJ9OgBeqxRw4DF5MueGdazmVRlWEBEEO/tUt8fF7OIykKnwwA==
=20HY
-----END PGP SIGNATURE-----