Tuning unbound perfomance.

[Юрий Иванов]

Hi,
I try to test unbound with dnsperf.

My old bind server on proxmox vm results e1000 driver 4G ram 4 virtual CPUs:
Statistics:

  Queries sent:         12735
  Queries completed:    12649 (99.32%)
  Queries lost:         86 (0.68%)

  Response codes:       NOERROR 9192 (72.67%), SERVFAIL 119 (0.94%), NXDOMAIN 3338 (26.39%)
  Average packet size:  request 38, response 222
  Run time (s):         14.771516
  Queries per second:   856.310212

  Average Latency (s):  0.054782 (min 0.000427, max 3.399655)
  Latency StdDev (s):   0.145675

Where unbound has worse results on bare metal hardware (I have test server):

Statistics:

  Queries sent:         4718
  Queries completed:    4694 (99.49%)
  Queries lost:         24 (0.51%)

  Response codes:       NOERROR 3384 (72.09%), SERVFAIL 41 (0.87%), NXDOMAIN 1269 (27.03%)
  Average packet size:  request 38, response 93
  Run time (s):         13.592185
  Queries per second:   345.345506

  Average Latency (s):  0.201078 (min 0.000199, max 4.933770)
  Latency StdDev (s):   0.345073

I try to use guide https://nlnetlabs.nl/documentation/unbound/howto-optimise/ after ершы settings performance worsened. (

Is there any guides to tune system for DNS perfomance?


I see 4 threads:
# unbound-control status
version: 1.6.6
verbosity: 1
threads: 4
modules: 3 [ ipsecmod validator iterator ]
uptime: 1519 seconds
options: reuseport control(ssl)
unbound (pid 10732) is running...

Because CPU count is 4.
# lscpu
Architecture:          x86_64
CPU op-mode(s):        32-bit, 64-bit
Byte Order:            Little Endian
CPU(s):                4
On-line CPU(s) list:   0-3
Thread(s) per core:    1
Core(s) per socket:    4
Socket(s):             1
NUMA node(s):          1

but htop shows only two unbound -d instances.

Thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200506/fdb3855e/attachment.htm>