netdev - Re: TCP stalls with 802.3ad + bridge + kvm guest

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 1 Aug 2012 09:41:04 -0500
From:	Peter Samuelson <psamuelson@...lder.net>
To:	Jay Vosburgh <fubar@...ibm.com>, netdev@...r.kernel.org
Cc:	jgoerzen@...lder.net
Subject: Re: TCP stalls with 802.3ad + bridge + kvm guest


  [Peter Samuelson]
> >    ixgbe [10 Gbit port] -- bonding [802.3ad] -- bridge -- KVM guest
> >
> >It all works, except that with some flows in the KVM guest - I
> >can reproduce using smbclient - transfers keep stalling, such that I'm
> >averaging well under 1 MB/s.  Should be more like 100 MB/s.
> >
> >Oddly, this only occurs when both the 802.3ad and KVM are used:
> >
> >    Server        Agg        Client         TCP stalls
> >    --------------------------------------------------
> >    external      none       KVM guest      no
> >    external      802.3ad    KVM host       no
> >    KVM host      802.3ad    KVM guest      no
> >    external      802.3ad    KVM guest      yes

[Jay Vosburgh]
>       Does the problem happen if the bond is a different mode
> (balance-xor, for example)?

No, the balance-xor mode seems to work normally.  I am testing it with
only a single slave interface, same way I'm testing LACP mode.

>       Do the various stats on the host and guest show any drops?
> E.g., from "netstat -i" and "tc -s qdisc"

I am not sure what to make of 'netstat -i'.  Some test boots, I get
26000 or so RX packets dropped on bond0 and eth2 (the slave interface),
but not during the actual file transfer tests.  The current test boot,
with LACP enabled, 'netstat -i' shows only 19 dropped RX packets from
bond0 (compared to 740k total RX packets), after several test runs.

Thanks,
Peter
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html