Significant memory usage

Ondřej Surý ondrej at isc.org
Tue Jul 1 18:14:06 UTC 2025


Hi,

thanks for providing a reproducer. Just to give some rough numbers for the various
branches we have (9.18, 9.20 and development):

BIND 9.18 (bind-9.18 branch HEAD)

$ smem -P name[d]
  PID User     Command       Swap      USS      PSS      RSS
450020 ondrej   named        0  3233560  3234515  3243644

BIND 9.20 (bind-9.20 branch HEAD)

$ smem -P name[d]
  PID User     Command      Swap      USS      PSS      RSS
423614 ondrej  named        0  7624888  7625856  7635076

BIND 9.21 (main branch HEAD)

$ smem -P name[d]
  PID User     Command       Swap      USS      PSS      RSS
453348 ondrej   named        0  3772128  3773103  3782376

As you can see, the 9.20 does consume about 7.5 GB of memory, which might
be little on a higher side, but you are loading 300k zones into the memory and
there is no sharing between the content of the zones. 8 GB of memory for loading
300k zones doesn't seem wrong to me, but as you can see, this again got better
in the development version and the development is not done yet.

Also as Carlos said, this is exactly why RPZ came into existence and this particular
setup is just wrong, and RPZ should be used instead.

The main problem here is though that you think that we should prioritize **your**
setup over all the others and using very aggressive language to get your way.
We are not going to do that.

Ondrej
--
Ondřej Surý (He/Him)
ondrej at isc.org

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 1. 7. 2025, at 19:27, OwN-3m-All <own3mall at gmail.com> wrote:
> 
> >>  Apologies if I misunderstood your setup. I’ve also encountered memory issues in recent BIND versions — BIND 9.18.33 on Debian 12 is a tremendous beast, capable of handling millions of QPS — but after reducing logging (including DNSTAP) and disabling serve-stale, I saw a significant improvement in both performance and memory usage.
> 
> Sorry, there's 295,108 hosts I'm serving up as 127.0.0.1 (for ad blocking).
> 
> I zipped my entire /etc/bind directory (which includes all configs).  It's available to download here:
> 
> https://dinofly.com/files/linux/bind/bind_config_9.20_out_of_memory_bind_9.18_fine.zip
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users



More information about the bind-users mailing list