[Opendnssec-user]How to speed up signing performance

Jerry Lundström jerry at opendnssec.org
Tue Sep 4 05:56:53 UTC 2012


Hi Stuart,

On Fri, Aug 31, 2012 at 6:58 PM, Paul Wouters <paul at nohats.ca> wrote:
> We use the attached two patches to speed up the signerd. For us it seems
> mostly related to locking issues.

These two patches really does not affect signing time per say. The
first patch has no affect on signing time if your HSM works correctly,
all it does is to reduce the wait time on a mutex that will be
signaled once there is work to be done. And the second one is a bug
fix to the code executing external commands from the signer, if your
running from SVN trunk this will already be in.

I would do as Matthijs said and run ods-hsmspeed to see how fast your
HSM can go, change conf.xml to the optimal workers and drudgers and
then compare the numbers from ods-hsmspeed with the STATS line from
the Signer.

/Jerry

-- 
Jerry Lundström - OpenDNSSEC Developer
http://www.opendnssec.org/



More information about the Opendnssec-user mailing list