[Pdns-users] PDNS API slow using DNSSEC

[Luca Müller]

Hello,

I'm trying to setup WHMCS and PowerDNS using a custom Module for WHMCS.
Everything works fine and with a good speed:
DNSSEC DISABLED:
time curl -H 'X-API-Key: {HIDDEN}'
http://192.168.1.30:8081/api/v1/servers/localhost/zones
real    0m2.082s
user    0m0.012s
sys     0m0.024s

However with DNSSEC Enabled the API gets much slower:
DNSSEC ENABLED:
time curl -H 'X-API-Key: {HIDDEN}'
http://192.168.1.30:8081/api/v1/servers/localhost/zones
real    0m29.604s
user    0m0.012s
sys     0m0.024s

As you can see the execution time is about 25 Seconds longer with DNSSEC
enabled. This is not acceptable because i don't want to let my Visitors
wait for about 30 Seconds. And at some point the Limit of my Webservers
executiontime is reached.

The whole setup:
I have 4 pdns servers using gmysql:
dns1 - Master - Remote DB (on WHMCS Server)
dns2 - Slave - Local DB (MySQL replication from WHMCS)
dns3 - Slave - Local DB (MySQL replication from WHMCS)
dns4 - Slave - Local DB (MySQL replication from WHMCS)

GMYSQL Configuration:
launch=gmysql
gmysql-host=192.168.1.10 //or localhost
gmysql-user=powerdns
gmysql-dbname=admin_powerdns
gmysql-password={HIDDEN}
gmysql-dnssec=yes

The connection between the Servers is good so i don't think it's a Network
issue. I also tried to activate Logs (inclusive SQL Logging) but i couldn't
find any Error.

If you guys need any information, logs or outputs from me just let me know.

Best regards,
Luca
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20190215/e45698df/attachment.html>