[Opendnssec-user] ods-signerd and job scheduling

Matthijs Mekking matthijs at pletterpet.nl
Fri Oct 20 07:03:01 UTC 2017

Hi Jake,

The signer is able to sign zones concurrently. Each worker in the signer 
is able to work on one zone at the time. You can configure the number of 
workers in conf.xml


Default is 4, but you should configure this indeed to better match your 
number of processors, cores per processor, threads per core.

Note there is also something like <SignerThreads>. This is how many 
RRSIGs can be created concurrently. The optimal number depends on your 
HSM. You can use the utility ods-hsmspeed to test the HSM performance.

Best regards,

On 19-10-17 16:28, Jake Zack wrote:
> Hello all,
> Can ods-signerd sign more than a single zone concurrently, or does the 
> job scheduler ensure that there is only one signing happening at a time?
> If it can only sign one at a time, what happens if it gets 20 AXFR’s in 
> using the axfr adapter?  Just queued?
> If it can sign more than one at a time, is this based on number of 
> cores/threads?  Any special considerations anyone can think of assuming 
> mysql backend?
> Thanks,
> -Jacob Zack
> DNS Architect – CIRA (.CA TLD)
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

More information about the Opendnssec-user mailing list