[Opendnssec-user] Memory usage

[Sebastian Castro]

On 05/26/2011 08:14 PM, Matthijs Mekking wrote:
> Hi OpenDNSSEC users,

Hi Matthjis,

> 
> I have done a little research on the memory usage that the OpenDNSSEC
> signer daemon is taking. I have been generating TLD-ish zones with
> different number of delegations (from 1 to 5.000.000, see Table 1). All
> zones have 50 percent signed delegations. This is with the default
> policy, so NSEC3, RSASHA256 keys.
> 
> It looks to me that the signer daemon is using memory around 3 times the
> size of the signed zone file. I acknowledge this looks a bit greedy.
> 
> However, the question to the users is:
> 
> a) Do you see this as a problem?

All depends on the scale. Usually you will have your OpenDNSSEC process
running side by side with a DNS server on the same box, so you need to
dimension your memory requirements roughly to 4-5x the size of the zones
you are signing.

> 
> b) If so, can this problem be solved by buying more memory or do we need
> to make other trade-offs in order to optimize the memory usage?

Do you have any trade-off in mind to reduce the memory usage? Would such
trade-offs adversely affect performance?


> 
> 
> Thanks for your input.
> 
> 
> Best regards,
> 
> Matthijs
> 
> 
> 
> Table 1. Size measurements of zones signed with OpenDNSSEC
> 
> #NS             unsigned        signed          VIRT MEM        PHYS MEM
> 
>         1       0.7 Kb          6.0 Kb          219 Mb          5.8 Mb
>        10       3.0 Kb          14.7 Kb         219 Mb          5.8 Mb
>       100       25 Kb           101 Kb          283 Mb          6.1 Mb
>     1.000       227 Kb          464 Kb          283 Mb          7.4 Mb
>     5.000       1149 Kb         4.5 Mb          285 Mb          21 Mb
>    10.000       2308 Kb         9.0 Mb          286 Mb          38 Mb
>    50.000       11.7 Mb         45.6 Mb         363 Mb          170 Mb
>   100.000       23.4 Mb         91.0 Mb         507 Mb          334 Mb
>   250.000       59.0 Mb         228.2 Mb        1074 Mb         827 Mb
>   500.000       118.4 Mb        456.9 Mb        1.9 Gb          1.6 Gb
> 1.000.000       237.6 Mb        915.2 Mb        3.5 Gb          3.2 Gb
> 5.000.000       1.2 Gb          4.6 Gb          16.2 Gb         14 Gb
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user at lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

-- 
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535