Re: 'periodic daily' memory usage

Dag-Erling Smørgrav wrote:

The solution I found that did work was to eliminate the loop over
$MP and use 'find -s $MP ...' instead, which eliminates the need
for sort. This reduces the memory requirement for 100.checksetuid
by, oh, 80% or so, and greatly simplifies the logic.

Why don't you post that diff? Sounds like a good idea to me.

Note that 'find -s' and find | sort may not produce the same
output, but this only means you'll get an ugly diff the first time
you run the new script - it won't cause any trouble later.

An entirely different issue is why named uses so much memory...

It's a feature. :) If you're using it to resolve stuff out in the
wild, it's caching the answers to questions it has been asked (plus
whatever additional, authoritative information that was sent by the
remote name server). If you artificially reduce the size of the cache,
it will result in more network traffic, assuming it gets asked the
same question again. If you have a situation where you have
applications that ask a lot of questions once, or just a few times in
quick succession (mail farms often fit this profile) then reducing the
cache size probably won't hurt too much. If you have an environment
where your users ask a lot of different questions, but keep asking
them, reducing the cache is just going to shift the load elsewhere.

One thing you can do is reduce the cleaning interval, since that will
flush out the data that is past its TTL that much faster. This works
particularly well for the first scenario described above.

does anybody know of a way to specify how much memory named may use
for its cache?

You'll want to use BIND 9.4.2 for that if you want to do it, and take
a look at the ARM manual to get the right combination of options. I'd
tell you if I knew, but I never limit the cache on my name servers. :)

BTW, I think you mentioned that named had grown to 24M or so, FYI that
is actually a very small process size. My very lightly loaded resolver
for my home network is at 23M, with hardly any cache at all.

If I thought there was a good alternative resolver I'd recommend one,
but IMO BIND is it right now. There are a couple others in development
right now, but they are not yet ready for prime time (again, IMO).

hth,

Doug

--

This .signature sanitized for your protection

_______________________________________________
freebsd-hackers@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: Bind ohne AAAA- und A6-Requests betreiben
    ... Ich will den Cache und meinen eigenen Resolver auf ... Ich habe nun vorerst den "recursor" erst einmal (fuer ... Zonen koennen sowohl in mysql, postgresql, oracle, bind-Zonenfiles, ...
    (de.comp.os.unix.networking.misc)
  • Re: Problema Bind 9.6.1 CentOS 5.3
    ... We have some DNS servers with BIND version 9.6.1-P1 and we have some problems to resolve domain addresses. ... The fact that a flush clears that error implies a mismatch between the delegating NS records for a zone (which are used when the resolver doesn't have anything cached), and the NS records at the apex of the zone. ... By clearing the cache, you're forcing your resolver to use the delegating NS records, which may get it working temporarily, but you should try to figure out the real problem, since obviously you can't be flushing your cache constantly to work around this. ...
    (comp.protocols.dns.bind)
  • Re: Bind ohne AAAA- und A6-Requests betreiben
    ... Ich will den Cache und meinen eigenen Resolver auf ... Prev by Date: ... Next by Date: ...
    (de.comp.os.unix.networking.misc)
  • Re: Setup of DNS caching name server for home server
    ... For client machines in my network to use saturn via the caching server ... Somebody has to be my resolver. ... inside of my net take advantage of the cache. ...
    (Fedora)
  • Re: Windows XP Home firewall IP Addresds exceptions list
    ... the resolver discards the record from the cache. ... As to logs, perhaps they're referring to a firewall log. ... Since then the scanning computer has unable to gain access to my computer. ...
    (microsoft.public.security)