Hello, I'm seeing a huge performance regression with Samba 4.7.3 DLZ and BIND 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4. If I remove DLZ external DNS requests are a few ms. If it is enabled then internal and external DNS requests are a 1-3 seconds or timeout. Downgrading BIND had no effect. I reverted just the DLZ modules back to 4.7.0 and performance is back to normal: # cp /usr/src/samba-4.7.0/bin/modules/bind9/dlz_bind9* /usr/local/samba/lib/bind9 # echo 'export LDB_MODULES_PATH=/usr/src/samba-4.7.0/bin/modules/ldb' >> /etc/sysconfig/named # service named restart Thanks, Arthur This e-mail and any attachments may contain CONFIDENTIAL information, including PROTECTED HEALTH INFORMATION. If you are not the intended recipient, any use or disclosure of this information is STRICTLY PROHIBITED; you are requested to delete this e-mail and any attachments, notify the sender immediately, and notify the Mediture Privacy Officer at privacyofficer at mediture.com.
Hi, We've just had another person notice this issue and we're currently looking into it. If we need someone to test the patch fix, or if we need more information, we can let you know. I've filed a bug as well: https://bugzilla.samba.org/show_bug.cgi?id=13191 Cheers, Garming On 14/12/17 09:40, Arthur Ramsey via samba wrote:> Hello, > > I'm seeing a huge performance regression with Samba 4.7.3 DLZ and BIND > 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4. If I remove DLZ external DNS > requests are a few ms. If it is enabled then internal and external > DNS requests are a 1-3 seconds or timeout. Downgrading BIND had no > effect. > > I reverted just the DLZ modules back to 4.7.0 and performance is back > to normal: > > # cp /usr/src/samba-4.7.0/bin/modules/bind9/dlz_bind9* > /usr/local/samba/lib/bind9 > # echo 'export LDB_MODULES_PATH=/usr/src/samba-4.7.0/bin/modules/ldb' > >> /etc/sysconfig/named > # service named restart > > Thanks, > Arthur > > This e-mail and any attachments may contain CONFIDENTIAL information, > including PROTECTED HEALTH INFORMATION. If you are not the intended > recipient, any use or disclosure of this information is STRICTLY > PROHIBITED; you are requested to delete this e-mail and any > attachments, notify the sender immediately, and notify the Mediture > Privacy Officer at privacyofficer at mediture.com. > >
On Fri, 2017-12-15 at 10:16 +1300, Garming Sam via samba wrote:> Hi, > > We've just had another person notice this issue and we're currently > looking into it. If we need someone to test the patch fix, or if we need > more information, we can let you know. > > I've filed a bug as well: > > https://bugzilla.samba.org/show_bug.cgi?id=13191Attached is a possible set of patches. As indicated, a search for a not-existing name, be it one that will match with a wildcard or one that wont, will still be slow. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba -------------- next part --------------