From owner-freebsd-current@FreeBSD.ORG Wed Dec 4 15:42:44 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 278029C5 for ; Wed, 4 Dec 2013 15:42:44 +0000 (UTC) Received: from mail-vc0-x22c.google.com (mail-vc0-x22c.google.com [IPv6:2607:f8b0:400c:c03::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id DAA9319E6 for ; Wed, 4 Dec 2013 15:42:43 +0000 (UTC) Received: by mail-vc0-f172.google.com with SMTP id hz11so11636617vcb.31 for ; Wed, 04 Dec 2013 07:42:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=u07zXVaRVUUaFJliT2fTE9PM3wU6vRDLgrNQQwezsjU=; b=Jksc9I8eOGRoSenqU9Ukvb5sxdVwg08Wsfj1/S3okCO7v4Vk0iJYm41JwdjlPW5yAi 0nHdXa3+Cv4i9Gl130P32eO9iFdchfEvdg6Lomhv2JHAF0usa1mXJep60rei1NVAreD1 buHgGXTkT56ZYtAl7UHBi+hE6rG+tCOvhfZD6Fph21pFLBMlc4Wo7k9tjQaiFwpnfGU0 3LrVWCT06F280FOmvl8lutdh8xbNL126cbdPZNI/5E4MNgNVZMiaWEAc/G+xQNjDwoKw 2cvxZzjqEwbmZOL9ogmpdfMc4PHk4O2aLz1N/bAVEVkEOcc6J0Xb2z3rSsn625PvOLmz WNeg== MIME-Version: 1.0 X-Received: by 10.58.67.168 with SMTP id o8mr9645864vet.22.1386171763049; Wed, 04 Dec 2013 07:42:43 -0800 (PST) Received: by 10.58.37.135 with HTTP; Wed, 4 Dec 2013 07:42:42 -0800 (PST) Date: Wed, 4 Dec 2013 10:42:42 -0500 Message-ID: Subject: unbound is extremely slow From: Shawn Webb To: FreeBSD-current Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Dec 2013 15:42:44 -0000 So I have unbound running in a vnet jail. Doing a lookup with `host` is pretty responsive, but Chromium's lookups are extremely slow (taking around 30 seconds to resolve). I'm running pretty much a stock config. I've tried turning off DNSSEC, but that doesn't help any. I have num-threads set to 4, though I have 8 cores on this box. I've pasted my config below. Thanks, Shawn server: username: unbound directory: /var/unbound chroot: /var/unbound pidfile: /var/run/local_unbound.pid #auto-trust-anchor-file: /var/unbound/root.key logfile: /var/unbound/unbound.log log-time-ascii: yes log-queries: yes verbosity: 2 interface: 0.0.0.0 interface: ::0 access-control: 0.0.0.0/0 allow access-control: ::0/0 allow prefetch: yes num-threads: 4 include: /var/unbound/forward.conf