<html><p>Good day</p><p>We use Unbound in several Versions 1.17.1 and on older Servers 1.13.1-1 (Both are on Debian Servers)</p><p>Further we receive via IXFR some Spamhaus RPZ Zones. One of the RPZ file is about 137MB (aprox. 1.5Mio Records).</p><p>It seems, unbound gets slow to answer requests, especially when a IXFR occur.</p><p> </p><p>This are our settings/tunings:</p><p> num-threads: 4<br> </p><p> # power of 2 close to num-threads<br> msg-cache-slabs: 4<br> rrset-cache-slabs: 4<br> infra-cache-slabs: 4<br> key-cache-slabs: 4</p><p> # more cache memory, rrset=msg*2<br> rrset-cache-size: 512m<br> msg-cache-size: 256m</p><p> # more outgoing connections<br> # depends on number of cores: 1024/cores - 50<br> outgoing-range: 16384<br> num-queries-per-thread: 8192</p><p> # Larger socket buffer. OS may need config.<br> so-rcvbuf: 32m<br> so-sndbuf: 32m</p><p> # other cache sizes<br> key-cache-size: 16m<br> neg-cache-size: 4m</p><p> # overwrite cache values (mb 20160802 Issue 17515)<br> cache-max-ttl: 3600</p><p><br> cache-min-ttl: 300<br> </p><p>Is such a huge RPZ Zone file of for unbound?</p><p>did we missed something in our config?</p><p> </p><p>If further Config are needed please let me know<br> </p><p>Best regards</p><p>A</p></html>