Good day
We use Unbound in several Versions 1.17.1 and on older Servers 1.13.1-1 (Both are on Debian Servers)
Further we receive via IXFR some Spamhaus RPZ Zones. One of the RPZ file is about 137MB (aprox. 1.5Mio Records).
It seems, unbound gets slow to answer requests, especially when a IXFR occur.
This are our settings/tunings:
num-threads: 4
power of 2 close to num-threads
msg-cache-slabs: 4
rrset-cache-slabs: 4
infra-cache-slabs: 4
key-cache-slabs: 4
more cache memory, rrset=msg*2
rrset-cache-size: 512m
msg-cache-size: 256m
more outgoing connections
depends on number of cores: 1024/cores - 50
outgoing-range: 16384
num-queries-per-thread: 8192
Larger socket buffer. OS may need config.
so-rcvbuf: 32m
so-sndbuf: 32m
other cache sizes
key-cache-size: 16m
neg-cache-size: 4m
overwrite cache values (mb 20160802 Issue 17515)
cache-max-ttl: 3600
cache-min-ttl: 300
Is such a huge RPZ Zone file of for unbound?
did we missed something in our config?
If further Config are needed please let me know
Best regards
A