On Tue, 4 Sep 2012, Jerry Lundström wrote:
On Fri, Aug 31, 2012 at 6:58 PM, Paul Wouters <[email protected]> wrote:
We use the attached two patches to speed up the signerd. For us it seems
mostly related to locking issues.
These two patches really does not affect signing time per say. The
first patch has no affect on signing time if your HSM works correctly,
all it does is to reduce the wait time on a mutex that will be
signaled once there is work to be done.
It does ensure we no longer see signings failing for over an hour.
And the second one is a bug
fix to the code executing external commands from the signer, if your
running from SVN trunk this will already be in.
I would do as Matthijs said and run ods-hsmspeed to see how fast your
HSM can go, change conf.xml to the optimal workers and drudgers and
then compare the numbers from ods-hsmspeed with the STATS line from
the Signer.
We saw this too when only doing like 10 signatures. I'm not sure if your
explanation would cover that, but I just attached it as reference, as
with these two patches, it seems we no longer have any issues.
Paul
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
