From: Jamie C. <jca...@we...> - 2010-02-13 19:35:41
|
Wow, that is really slow! How many zones do you have there, and how many records are in the zone you are editing? Rimas Kudelis <rq...@ak...> wrote: >Hi, >I have a problem with Webmin's bind module. The thing is that whenever I >manually edit a zone, I have to wait way too long for the change to get >submitted. I suspect that this may be related to DNSSEC enabled for the >zone in question, but that still doesn't explain why I have to wait for >something ridiculous like 15 minutes for the form to just get submitted. > >Here's my typical scenario: >* choose a zone, >* click Edit records file >* add a record >* click Save > >I'm running webmin 1.500 on Debian 5.0.3. Has anyone experienced >anything similar? Maybe I'm just missing some libraries that would >speed up signing those records dramatically? > >Any help appreciated, >Rimas Kudelis > > > > >------------------------------------------------------------------------------ >SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, >Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW >http://p.sf.net/sfu/solaris-dev2dev >- >Forwarded by the Webmin mailing list at web...@li... >To remove yourself from this list, go to >http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Rimas K. <rq...@ak...> - 2010-02-13 19:46:49
Attachments:
signature.asc
|
Hi, Apart from default ones, I have 7 master and 2 slave zones. The biggest of them has about 50 ordinary records, and perhaps a few times more security records (RRSIG, NSEC, IN RRSIG, IN NSEC) that are being automatically generated by webmin. That's nothing really big, is it? Like I said, I suspect it's that generation of security records that slows things down. I have "strongest allowed" key size, perhaps that's the problem? Also, I think webmin somehow misses its own lock file. It seems to complain about the zone file being locked unless I remove its own lockfile manually. (Now I'm just doing that anyway, so I can't tell right now if this is a permanent problem or not). Rimas 2010.02.13 21:35, Jamie Cameron rašė: > Wow, that is really slow! > > How many zones do you have there, and how many records are in the zone you are editing? > > > Rimas Kudelis <rq...@ak...> wrote: > > >> Hi, >> I have a problem with Webmin's bind module. The thing is that whenever I >> manually edit a zone, I have to wait way too long for the change to get >> submitted. I suspect that this may be related to DNSSEC enabled for the >> zone in question, but that still doesn't explain why I have to wait for >> something ridiculous like 15 minutes for the form to just get submitted. >> >> Here's my typical scenario: >> * choose a zone, >> * click Edit records file >> * add a record >> * click Save >> >> I'm running webmin 1.500 on Debian 5.0.3. Has anyone experienced >> anything similar? Maybe I'm just missing some libraries that would >> speed up signing those records dramatically? >> >> Any help appreciated, >> Rimas Kudelis >> >> >> |
From: Jamie C. <jca...@we...> - 2010-02-13 23:02:11
|
It certainly could be DNSSEC record generation that is slow.. I presume you have it enabled for that domain? When a record is taking 15 minutes to save, if you SSH in and run the "top" command, what process does it show using up a lot of CPU time? - Jamie On 13/Feb/2010 11:47 Rimas Kudelis <rq...@ak...> wrote .. > Hi, > > Apart from default ones, I have 7 master and 2 slave zones. The biggest > of them has about 50 ordinary records, and perhaps a few times more > security records (RRSIG, NSEC, IN RRSIG, IN NSEC) that are being > automatically generated by webmin. That's nothing really big, is it? > > Like I said, I suspect it's that generation of security records that > slows things down. I have "strongest allowed" key size, perhaps that's > the problem? > > Also, I think webmin somehow misses its own lock file. It seems to > complain about the zone file being locked unless I remove its own > lockfile manually. (Now I'm just doing that anyway, so I can't tell > right now if this is a permanent problem or not). > > Rimas > > 2010.02.13 21:35, Jamie Cameron rašė: > > Wow, that is really slow! > > > > How many zones do you have there, and how many records are in the zone you are > editing? > > > > > > Rimas Kudelis <rq...@ak...> wrote: > > > > > >> Hi, > >> I have a problem with Webmin's bind module. The thing is that whenever I > >> manually edit a zone, I have to wait way too long for the change to get > >> submitted. I suspect that this may be related to DNSSEC enabled for the > >> zone in question, but that still doesn't explain why I have to wait for > >> something ridiculous like 15 minutes for the form to just get submitted. > >> > >> Here's my typical scenario: > >> * choose a zone, > >> * click Edit records file > >> * add a record > >> * click Save > >> > >> I'm running webmin 1.500 on Debian 5.0.3. Has anyone experienced > >> anything similar? Maybe I'm just missing some libraries that would > >> speed up signing those records dramatically? > >> > >> Any help appreciated, > >> Rimas Kudelis > >> > >> > >> > |
From: steve <st...@gr...> - 2010-02-14 02:12:51
|
I'd second that Jamie. 2048byte keys can take a really long time to create, especially if you're short on entropy. Steve On Sat, 2010-02-13 at 15:02 -0800, Jamie Cameron wrote: > It certainly could be DNSSEC record generation that is slow.. I > presume you have it enabled for that domain? > > When a record is taking 15 minutes to save, if you SSH in and run > the "top" command, what process does it show using up a lot of CPU > time? > > - Jamie > > On 13/Feb/2010 11:47 Rimas Kudelis <rq...@ak...> wrote .. > > Hi, > > > > Apart from default ones, I have 7 master and 2 slave zones. The biggest > > of them has about 50 ordinary records, and perhaps a few times more > > security records (RRSIG, NSEC, IN RRSIG, IN NSEC) that are being > > automatically generated by webmin. That's nothing really big, is it? > > > > Like I said, I suspect it's that generation of security records that > > slows things down. I have "strongest allowed" key size, perhaps that's > > the problem? > > > > Also, I think webmin somehow misses its own lock file. It seems to > > complain about the zone file being locked unless I remove its own > > lockfile manually. (Now I'm just doing that anyway, so I can't tell > > right now if this is a permanent problem or not). > > > > Rimas > > > > 2010.02.13 21:35, Jamie Cameron rašė: > > > Wow, that is really slow! > > > > > > How many zones do you have there, and how many records are in the zone you are > > editing? > > > > > > > > > Rimas Kudelis <rq...@ak...> wrote: > > > > > > > > >> Hi, > > >> I have a problem with Webmin's bind module. The thing is that whenever I > > >> manually edit a zone, I have to wait way too long for the change to get > > >> submitted. I suspect that this may be related to DNSSEC enabled for the > > >> zone in question, but that still doesn't explain why I have to wait for > > >> something ridiculous like 15 minutes for the form to just get submitted. > > >> > > >> Here's my typical scenario: > > >> * choose a zone, > > >> * click Edit records file > > >> * add a record > > >> * click Save > > >> > > >> I'm running webmin 1.500 on Debian 5.0.3. Has anyone experienced > > >> anything similar? Maybe I'm just missing some libraries that would > > >> speed up signing those records dramatically? > > >> > > >> Any help appreciated, > > >> Rimas Kudelis > > >> > > >> > > >> > > > ------------------------------------------------------------------------------ > SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, > Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW > http://p.sf.net/sfu/solaris-dev2dev > - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list -- Steve Holdoway <st...@gr...> http://www.greengecko.co.nz MSN: st...@gr... GPG Fingerprint = B337 828D 03E1 4F11 CB90 853C C8AB AF04 EF68 52E0 |
From: Rimas K. <rq...@ak...> - 2010-02-14 09:20:41
Attachments:
signature.asc
|
Oh right, it appears I was totally lacking entropy. Installing rngd and telling it to gather entropy it from /dev/urandom fixes the problem. Thanks a lot, I'll have to look into means of generating more entropy on the server... Rimas 2010.02.14 04:12, steve rašė: > I'd second that Jamie. 2048byte keys can take a really long time to > create, especially if you're short on entropy. > > Steve > On Sat, 2010-02-13 at 15:02 -0800, Jamie Cameron wrote: > >> It certainly could be DNSSEC record generation that is slow.. I >> presume you have it enabled for that domain? >> >> When a record is taking 15 minutes to save, if you SSH in and run >> the "top" command, what process does it show using up a lot of CPU >> time? >> >> - Jamie >> >> On 13/Feb/2010 11:47 Rimas Kudelis <rq...@ak...> wrote .. >> >>> Hi, >>> >>> Apart from default ones, I have 7 master and 2 slave zones. The biggest >>> of them has about 50 ordinary records, and perhaps a few times more >>> security records (RRSIG, NSEC, IN RRSIG, IN NSEC) that are being >>> automatically generated by webmin. That's nothing really big, is it? >>> >>> Like I said, I suspect it's that generation of security records that >>> slows things down. I have "strongest allowed" key size, perhaps that's >>> the problem? >>> >>> Also, I think webmin somehow misses its own lock file. It seems to >>> complain about the zone file being locked unless I remove its own >>> lockfile manually. (Now I'm just doing that anyway, so I can't tell >>> right now if this is a permanent problem or not). >>> >>> Rimas >>> >>> 2010.02.13 21:35, Jamie Cameron rašė: >>> >>>> Wow, that is really slow! >>>> >>>> How many zones do you have there, and how many records are in the zone you are >>>> >>> editing? >>> >>>> >>>> Rimas Kudelis <rq...@ak...> wrote: >>>> >>>> >>>> >>>>> Hi, >>>>> I have a problem with Webmin's bind module. The thing is that whenever I >>>>> manually edit a zone, I have to wait way too long for the change to get >>>>> submitted. I suspect that this may be related to DNSSEC enabled for the >>>>> zone in question, but that still doesn't explain why I have to wait for >>>>> something ridiculous like 15 minutes for the form to just get submitted. >>>>> >>>>> Here's my typical scenario: >>>>> * choose a zone, >>>>> * click Edit records file >>>>> * add a record >>>>> * click Save >>>>> >>>>> I'm running webmin 1.500 on Debian 5.0.3. Has anyone experienced >>>>> anything similar? Maybe I'm just missing some libraries that would >>>>> speed up signing those records dramatically? >>>>> >>>>> Any help appreciated, >>>>> Rimas Kudelis >>>>> >>>>> >>>>> >>>>> >>> >> ------------------------------------------------------------------------------ >> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, >> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW >> http://p.sf.net/sfu/solaris-dev2dev >> - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list >> >> >> >> ------------------------------------------------------------------------------ >> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, >> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW >> http://p.sf.net/sfu/solaris-dev2dev >> >> >> - >> Forwarded by the Webmin mailing list at web...@li... >> To remove yourself from this list, go to >> http://lists.sourceforge.net/lists/listinfo/webadmin-list >> |