On Sat, Jul 26, 2008 at 4:12 PM, J Duke <[EMAIL PROTECTED]> wrote: > I wonder is anyone is seeing performance issues with the patched DNS in the > late snapshots? > I installed the July 22 snapshot on our DNS servers, which handle a pretty > heavy load of lookups, mostly for anti-spam action. > > It was running at 45% or higher cpu utilization after the July 22 snapshot > was > installed. > We run a couple of Ironport boxes, that handle about 200k emails per hour. > They use the OpenBSD DNS servers to look up the sending IPs as a first > defense > against spammers, and drop about 98% of the inbound mail. > With the snapshot installed the traffic went down to 70k per hour and > people started complaining of DNS lookup failures for random sites.
While I haven't compared the two, this is a known issue with the ISC patch as well--though I understand the beta version of BIND includes "optimized code that will reduce the impact in performance to non-significant levels."
