mongodump is pretty intensive so I always run it against the slaves. However, this is more difficult in a sharded environment using replica sets because the data will be distributed and servers might change roles. It would be useful to have a flag where mongodump will connect through mongos but always choose the slave to read from.