<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,<br>
I have a nsd version 4.3.9 (from official Ubuntu Jammy repository)
configured as a slave server with about 400k zones.<br>
</p>
<p>I have an issue with a delay of AXFR/IXFR requests, which
sometimes takes more than 10 seconds. Example of receiving XFR:<br>
</p>
<p><font face="Courier New, Courier, monospace">2022-08-16_14:29:01
xxxxxxxx nsd[1270460]: info: notify for somedomain. from
192.168.205.10 serial 1658932140<br>
2022-08-16_14:29:07 xxxxxxxx nsd[2867429]: info: xfrd: zone
somedomain committed "received update to serial 1658932140 at
2022-08-16T14:29:07 from 192.168.205.10 TSIG verified with key
xxxxxxxxx"<br>
2022-08-16_14:29:18 dfo5pub1 nsd[2867432]: info: zone </font><font
face="Courier New, Courier, monospace"><font face="Courier New,
Courier, monospace">somedomain</font>. received update to
serial 1658932140 at 2022-07-27T14:29:07 from 192.168.205.10
TSIG verified with key </font><font face="Courier New, Courier,
monospace"><font face="Courier New, Courier, monospace">xxxxxxxxx
</font>of 3045 bytes in 4.1e-05 seconds<br>
2022-08-16_14:29:28 dfo5pub1 nsd[2867429]: info: zone
somedomain serial 1658825141 is updated to 1658932140</font></p>
<p>You can see, in this example, there is 10s delay between received
update and zone is updated actions.</p>
<p>Nsd configuration, server section (We use bare metal server with
48 threads (24 cores + hyperthreading)):</p>
<p><font face="Courier New, Courier, monospace">server:<br>
server-count: 40<br>
# Anycast addresses on loopback interface<br>
ip-transparent: yes<br>
ip-address: enp65s0f0<br>
ip-address: lo<br>
verbosity: 9<br>
database: "/var/lib/nsd/nsd.db"<br>
reuseport: yes<br>
zonesdir: "/var/lib/nsd"<br>
hide-version: yes<br>
version: "NSD"<br>
identity: "unidentified server"<br>
refuse-any: yes<br>
# Response Rate Limiting<br>
rrl-size: 50000000<br>
rrl-ratelimit: 300<br>
rrl-slip: 10<br>
# TCP capacity
(<a class="moz-txt-link-freetext" href="https://nsd.docs.nlnetlabs.nl/en/latest/running/tuning.html?highlight=performance">https://nsd.docs.nlnetlabs.nl/en/latest/running/tuning.html?highlight=performance</a>)<br>
tcp-count: 1400<br>
tcp-timeout: 6<br>
tcp-reject-overflow: yes</font><br>
</p>
<p>I tried to remove the database with <font face="Courier New,
Courier, monospace">database: ""</font>, but there were no
significant change. I tried to setup the cpu affinity as well, but
without success, but I'd like to avoid of this complexity.<br>
</p>
<p>Do we have something wrong in our setup or does we reach the
limitation of the daemon. The server cpu graph shows us about 10%
system time, which seems weird to me as well and about 1% of user
time., the bandwidth is less than 5Mbps.</p>
<p>Can you give me some advice how to speed the process up?</p>
<p>Thank you in advance.</p>
<p>Zdenek Novy<br>
Active24<br>
</p>
</body>
</html>