Re: [webmin-l] Bind module painfully slow

[Rimas K. <rq...@ak...>]

Oh right, it appears I was totally lacking entropy. Installing rngd and
telling it to gather entropy it from /dev/urandom fixes the problem.

Thanks a lot, I'll have to look into means of generating more entropy on
the server...

Rimas


2010.02.14 04:12, steve rašė:
> I'd second that Jamie. 2048byte keys can take a really long time to
> create, especially if you're short on entropy.
>
> Steve
> On Sat, 2010-02-13 at 15:02 -0800, Jamie Cameron wrote:
>   
>> It certainly could be DNSSEC record generation that is slow.. I
>> presume you have it enabled for that domain?
>>
>> When a record is taking 15 minutes to save, if you SSH in and run
>> the "top" command, what process does it show using up a lot of CPU
>> time?
>>
>>  - Jamie
>>
>> On 13/Feb/2010 11:47 Rimas Kudelis <rq...@ak...> wrote ..
>>     
>>> Hi,
>>>
>>> Apart from default ones, I have 7 master and 2 slave zones. The biggest
>>> of them has about 50 ordinary records, and perhaps a few times more
>>> security records (RRSIG, NSEC, IN RRSIG, IN NSEC) that are being
>>> automatically generated by webmin. That's nothing really big, is it?
>>>
>>> Like I said, I suspect it's that generation of security records that
>>> slows things down. I have "strongest allowed" key size, perhaps that's
>>> the problem?
>>>
>>> Also, I think webmin somehow misses its own lock file. It seems to
>>> complain about the zone file being locked unless I remove its own
>>> lockfile manually. (Now I'm just doing that anyway, so I can't tell
>>> right now if this is a permanent problem or not).
>>>
>>> Rimas
>>>
>>> 2010.02.13 21:35, Jamie Cameron rašė:
>>>       
>>>> Wow, that is really slow!
>>>>
>>>> How many zones do you have there,  and how many records are in the zone you are
>>>>         
>>> editing?
>>>       
>>>>
>>>> Rimas Kudelis <rq...@ak...> wrote:
>>>>
>>>>   
>>>>         
>>>>> Hi,
>>>>> I have a problem with Webmin's bind module. The thing is that whenever I
>>>>> manually edit a zone, I have to wait way too long for the change to get
>>>>> submitted. I suspect that this may be related to DNSSEC enabled for the
>>>>> zone in question, but that still doesn't explain why I have to wait for
>>>>> something ridiculous like 15 minutes for the form to just get submitted.
>>>>>
>>>>> Here's my typical scenario:
>>>>> * choose a zone,
>>>>> * click Edit records file
>>>>> * add a record
>>>>> * click Save
>>>>>
>>>>> I'm running webmin 1.500 on Debian 5.0.3. Has anyone experienced
>>>>> anything similar?  Maybe I'm just missing some libraries that would
>>>>> speed up signing those records dramatically?
>>>>>
>>>>> Any help appreciated,
>>>>> Rimas Kudelis
>>>>>
>>>>>
>>>>>     
>>>>>           
>>>       
>> ------------------------------------------------------------------------------
>> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
>> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
>> http://p.sf.net/sfu/solaris-dev2dev
>> - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>     
>>
>>
>> ------------------------------------------------------------------------------
>> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
>> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
>> http://p.sf.net/sfu/solaris-dev2dev
>>
>>
>> -
>> Forwarded by the Webmin mailing list at web...@li...
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>