Re: Query on Bind9 DLZ LDAP Connections load sharing

On 7.12.2016 12:42, Ram Kishore B wrote:
> Hi all,
> We have a query related to the Bind9 load sharing mechanism across multiple
> LDAP connections.
> 
> The set-up and configuration details are as below.
> - 1 DNS Simulator using dnsperf package
> - 1 Bind9 server(version 9.9.4) in RHEL 7.2 and DLZ LDAP plugin enabled
> during compilation. This server has 24 CPU's and 24 LDAP connections.
> - 1 LDAP server
> 
> Bind9 was already compiled with '--enable-threads' option and even though
> Bind9 is multi-threaded and having multiple LDAP connections, during load
> run it is noticed that always only one LDAP connections is getting used for
> database search.
> If Bind9 doesn't load share across multiple LDAP connections, then what is
> the use of supporting multiple LDAP connections.
> 
> Is there any configuration missing to do the load sharing across multiple
> connections?
> 
> Kindly let us know in case of any more information. Thanks in advance.
> 
> Named.conf file contents for DLZ LDAP:
> -----------------------------------------------
> dlz "ldap zone" {
>         database "ldap 24 v3 simple {cn=user} {password} {<IP Addr> }
> ldap:///dlzZoneName=$zone$,ou=dns,o=bind-dlz???objectclass=dlzZone
>         ldap:///dlzHostName=$record$,dlzZoneName=$zone$,ou=dns,o=
> bind-dlz?dlzTTL,dlzType,dlzPreference,dlzData,dlzIPAddr?sub?";
> };
> 
> /var/log/messages Logs while Bind 9 initialization:
> -----------------------------------------------
> named[21232]: built with '--enable-threads' '--with-dlz-ldap=/usr/lib64/'
> '--without-openssl'

I do not know answer for LDAP DLZ driver but in general, you will probably get
better performance with bind-dyndb-ldap driver which is using the new dyndb
interface introduced in BIND 9.11:

https://fedorahosted.org/bind-dyndb-ldap/

My colleague intents to release bind-dyndb-ldap version 11 this week so stay
tuned, it is coming.

-- 
Petr Spacek  @  Red Hat

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi