Need performance tuning tips

Yuri yvoinov at gmail.com
Wed Sep 7 07:47:21 UTC 2022


https://nlnetlabs.nl/documentation/unbound/howto-optimise/

That is you're looking for?

07.09.2022 13:44, Arista Sampurna via Unbound-users пишет:
> I'm creating a dns cache using unbound
>
> Does anybody have some additional performance tuning tips for Unbound?
>
>
> Best Regards
>
> Arista
>
>  ------------------------------------------------------------------------------
> OS Freebsd 12.3
> CPU 24
> Memory 32GB
> 300GB storage
> CPU: Intel(R) Xeon(R) CPU E5-2620 v2
> Current Queries: 12516
> more /usr/local/etc/unbound/unbound.conf
> servers:
>         verbosity: 0
>         num-threads: 20
>         interface: xxx.xxx.xxx.xxx at 53
>         interface: xxx.xxx.xxx.xxx at 53
>         ports: 53
>         outgoing-num-tcp: 200
>         incoming-num-tcp: 200
>         outgoing-range: 32768
>         so-rcvbuf: 8m
>         so-sndbuf: 8m
>         so-reuseport: no
>         max-udp-size: 4096
>         stream-wait-size: 6m
>         msg-buffer-size: 65552
>         msg-cache-slabs: 8
> logfile: /var/log/unbound.log
> log-servfail: no
> verbosity: 0
> log-time-ascii: yes
> use-syslog: no
> num-queries-per-thread: 4096
>         rrset-cache-size: 640m
>         msg-cache-size: 320m
>         msg-cache-slabs: 1024
>         rrset-cache-slabs: 1024
>         infra-cache-slabs: 1024
>         do-ip4: yes
>         do-ip6: yes
>         do-udp: yes
>         do-tcp: yes
>         do-daemonize: yes
> access-control: 127.0.0.0/8 <http://127.0.0.0/8> allow
> access-control: xxx.xxx.xxx.0/8 allow
> access-control: xxx.xxx.xxx.xxx/27 allow
> access-control: xxx.xxx.xxx.xxx/25 allow
> access-control: 0.0.0.0/0 <http://0.0.0.0/0> refuse
>         chroot: "/usr/local/etc/unbound"
>         username: "unbound"
>         directory: "/usr/local/etc/unbound"
>         pidfile: "/usr/local/etc/unbound/unbound.pid"
>         root-hints: "/usr/local/etc/unbound/named.cache"
>         hide-identity: yes
>         hide-version: yes
> remote control:
> control-enable: yes
> control-use-cert: no
> forward zone:
>         names: "."
>         forward-addr: 8.8.8.8
>         forward-addr: 1.1.1.1
>         forward-addr: xxx.xxx.xxx.xxx
>         forward-addr: xxx.xxx.xxx.xxx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20220907/0d129c7f/attachment.htm>


More information about the Unbound-users mailing list