[Opendnssec-user]How to speed up signing performance

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/31/2012 08:14 AM, 刘硕 wrote:
> Hi Jerry,
> 
>> The CPU usage you see is normal since the Signer is threaded it
>> will use more then 100% CPU (this really depends on how the OS
>> reports CPU usage). If you wish to lower the CPU usage you can
>> configure the number of Worker and Signer threads in conf.xml for
>> the Signer but then the signing will also take more time. Same
>> goes if you wish to optimize/speed up the signing, reconfigure
>> Worker and Signer threads to about 2x the number of virtual CPUs
>> you have (if you have 4 cores with hyper threading you will have
>> 8 virtual CPUs).
> 
> # cat /proc/cpuinfo| grep processor | wc -l 24 As you said before,
> if our server has 24 processors, for a better signing performance,
> the worker threads should be 24*2 and keep signer threads equal
> with worker threads, right?

Workers will work on one zone at a time. So if you have less than 24
zones, I would recommend setting the number of workers equal to the
number of zones.

Signer threads (aka drudgers) is the number of signing operations in
parallel will be made. That depends on your HSM. You can use
ods-hsmspeed to find out the optimal number of threads you should use.

Best regards,
  Matthijs


> 
> 
> Best regards, Stuart
> 
> 
> _______________________________________________ Opendnssec-user
> mailing list Opendnssec-user at lists.opendnssec.org 
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
> 


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQQFuaAAoJEA8yVCPsQCW56KAH+wQ6lc3Djfff55NvL1an885f
xPVd5csjw6Gr7vZCO4KRbCCFA59wAhlrHqgahaNrLbvmRNAyB7aLmXGBFyLpqiLn
nown9qhcS8RRUJNb8AG/j7tluY2SHuWvq+wS9FqHvfo3aMZ27IsDMsPCN+y4zYO7
2kXAc6+F24m9rtszl64TsUl8jUThlqWc3Xv1iiH9qvyMGqFdCTz/unyyk3H/RxrW
pAkVLytL9x8n/FZxiJFt1FML260rDp9/XW0F9f8UQmobQJuFYF3UVLHmbVzs30YX
c2p9QgQtdWLfBux0NIyj2+cJtmty+LnVS2tBN+m0hO3LqRjlgc0PhtfJVCVVws8=
=TXIk
-----END PGP SIGNATURE-----