Significant memory usage
Ondřej Surý
ondrej at isc.org
Tue Jul 1 18:14:06 UTC 2025
Hi,
thanks for providing a reproducer. Just to give some rough numbers for the various
branches we have (9.18, 9.20 and development):
BIND 9.18 (bind-9.18 branch HEAD)
$ smem -P name[d]
PID User Command Swap USS PSS RSS
450020 ondrej named 0 3233560 3234515 3243644
BIND 9.20 (bind-9.20 branch HEAD)
$ smem -P name[d]
PID User Command Swap USS PSS RSS
423614 ondrej named 0 7624888 7625856 7635076
BIND 9.21 (main branch HEAD)
$ smem -P name[d]
PID User Command Swap USS PSS RSS
453348 ondrej named 0 3772128 3773103 3782376
As you can see, the 9.20 does consume about 7.5 GB of memory, which might
be little on a higher side, but you are loading 300k zones into the memory and
there is no sharing between the content of the zones. 8 GB of memory for loading
300k zones doesn't seem wrong to me, but as you can see, this again got better
in the development version and the development is not done yet.
Also as Carlos said, this is exactly why RPZ came into existence and this particular
setup is just wrong, and RPZ should be used instead.
The main problem here is though that you think that we should prioritize **your**
setup over all the others and using very aggressive language to get your way.
We are not going to do that.
Ondrej
--
Ondřej Surý (He/Him)
ondrej at isc.org
My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> On 1. 7. 2025, at 19:27, OwN-3m-All <own3mall at gmail.com> wrote:
>
> >> Apologies if I misunderstood your setup. I’ve also encountered memory issues in recent BIND versions — BIND 9.18.33 on Debian 12 is a tremendous beast, capable of handling millions of QPS — but after reducing logging (including DNSTAP) and disabling serve-stale, I saw a significant improvement in both performance and memory usage.
>
> Sorry, there's 295,108 hosts I'm serving up as 127.0.0.1 (for ad blocking).
>
> I zipped my entire /etc/bind directory (which includes all configs). It's available to download here:
>
> https://dinofly.com/files/linux/bind/bind_config_9.20_out_of_memory_bind_9.18_fine.zip
>
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
More information about the bind-users
mailing list