Change the skb allocation api to indicate RX usage and use this to fall back to the reserve when needed. SKBs allocated from the reserve are tagged in skb->emergency. Teach all other skb ops about emergency skbs and the reserve accounting. Use the (new) packet split API to allocate and track fragment pages from the emergency reserve. Do this using an atomic counter in page->index. This is needed because the fragments have a different sharing semantic than that indicated by skb_shinfo()->dataref. Note that the decision to distinguish between regular and emergency SKBs allows the accounting overhead to be limited to the later kind. Signed-off-by: Peter Zijlstra --- include/linux/mm_types.h | 1 include/linux/skbuff.h | 25 +++++- net/core/skbuff.c | 173 +++++++++++++++++++++++++++++++++++++++++------ 3 files changed, 173 insertions(+), 26 deletions(-) Index: linux-2.6/include/linux/skbuff.h =================================================================== --- linux-2.6.orig/include/linux/skbuff.h +++ linux-2.6/include/linux/skbuff.h @@ -289,7 +289,8 @@ struct sk_buff { __u8 pkt_type:3, fclone:2, ipvs_property:1, - nf_trace:1; + nf_trace:1, + emergency:1; __be16 protocol; void (*destructor)(struct sk_buff *skb); @@ -341,10 +342,22 @@ struct sk_buff { #include +#define SKB_ALLOC_FCLONE 0x01 +#define SKB_ALLOC_RX 0x02 + +static inline bool skb_emergency(const struct sk_buff *skb) +{ +#ifdef CONFIG_NETVM + return unlikely(skb->emergency); +#else + return false; +#endif +} + extern void kfree_skb(struct sk_buff *skb); extern void __kfree_skb(struct sk_buff *skb); extern struct sk_buff *__alloc_skb(unsigned int size, - gfp_t priority, int fclone, int node); + gfp_t priority, int flags, int node); static inline struct sk_buff *alloc_skb(unsigned int size, gfp_t priority) { @@ -354,7 +367,7 @@ static inline struct sk_buff *alloc_skb( static inline struct sk_buff *alloc_skb_fclone(unsigned int size, gfp_t priority) { - return __alloc_skb(size, priority, 1, -1); + return __alloc_skb(size, priority, SKB_ALLOC_FCLONE, -1); } extern void kfree_skbmem(struct sk_buff *skb); @@ -1297,7 +1310,8 @@ static inline void __skb_queue_purge(str static inline struct sk_buff *__dev_alloc_skb(unsigned int length, gfp_t gfp_mask) { - struct sk_buff *skb = alloc_skb(length + NET_SKB_PAD, gfp_mask); + struct sk_buff *skb = + __alloc_skb(length + NET_SKB_PAD, gfp_mask, SKB_ALLOC_RX, -1); if (likely(skb)) skb_reserve(skb, NET_SKB_PAD); return skb; @@ -1343,6 +1357,7 @@ static inline struct sk_buff *netdev_all } extern struct page *__netdev_alloc_page(struct net_device *dev, gfp_t gfp_mask); +extern void __netdev_free_page(struct net_device *dev, struct page *page); /** * netdev_alloc_page - allocate a page for ps-rx on a specific device @@ -1359,7 +1374,7 @@ static inline struct page *netdev_alloc_ static inline void netdev_free_page(struct net_device *dev, struct page *page) { - __free_page(page); + __netdev_free_page(dev, page); } /** Index: linux-2.6/net/core/skbuff.c =================================================================== --- linux-2.6.orig/net/core/skbuff.c +++ linux-2.6/net/core/skbuff.c @@ -179,21 +179,28 @@ EXPORT_SYMBOL(skb_truesize_bug); * %GFP_ATOMIC. */ struct sk_buff *__alloc_skb(unsigned int size, gfp_t gfp_mask, - int fclone, int node) + int flags, int node) { struct kmem_cache *cache; struct skb_shared_info *shinfo; struct sk_buff *skb; u8 *data; + int emergency = 0, memalloc = sk_memalloc_socks(); - cache = fclone ? skbuff_fclone_cache : skbuff_head_cache; + size = SKB_DATA_ALIGN(size); + cache = (flags & SKB_ALLOC_FCLONE) + ? skbuff_fclone_cache : skbuff_head_cache; +#ifdef CONFIG_NETVM + if (memalloc && (flags & SKB_ALLOC_RX)) + gfp_mask |= __GFP_NOMEMALLOC|__GFP_NOWARN; +retry_alloc: +#endif /* Get the HEAD */ skb = kmem_cache_alloc_node(cache, gfp_mask & ~__GFP_DMA, node); if (!skb) - goto out; + goto noskb; - size = SKB_DATA_ALIGN(size); data = kmalloc_node_track_caller(size + sizeof(struct skb_shared_info), gfp_mask, node); if (!data) @@ -203,6 +210,7 @@ struct sk_buff *__alloc_skb(unsigned int * See comment in sk_buff definition, just before the 'tail' member */ memset(skb, 0, offsetof(struct sk_buff, tail)); + skb->emergency = emergency; skb->truesize = size + sizeof(struct sk_buff); atomic_set(&skb->users, 1); skb->head = data; @@ -219,7 +227,7 @@ struct sk_buff *__alloc_skb(unsigned int shinfo->ip6_frag_id = 0; shinfo->frag_list = NULL; - if (fclone) { + if (flags & SKB_ALLOC_FCLONE) { struct sk_buff *child = skb + 1; atomic_t *fclone_ref = (atomic_t *) (child + 1); @@ -227,12 +235,31 @@ struct sk_buff *__alloc_skb(unsigned int atomic_set(fclone_ref, 1); child->fclone = SKB_FCLONE_UNAVAILABLE; + child->emergency = skb->emergency; } out: return skb; + nodata: kmem_cache_free(cache, skb); skb = NULL; +noskb: +#ifdef CONFIG_NETVM + /* Attempt emergency allocation when RX skb. */ + if (likely(!(flags & SKB_ALLOC_RX) || !memalloc)) + goto out; + + if (!emergency) { + if (rx_emergency_get(size)) { + gfp_mask &= ~(__GFP_NOMEMALLOC|__GFP_NOWARN); + gfp_mask |= __GFP_MEMALLOC; + emergency = 1; + goto retry_alloc; + } + } else + rx_emergency_put(size); +#endif + goto out; } @@ -255,7 +282,7 @@ struct sk_buff *__netdev_alloc_skb(struc int node = dev->dev.parent ? dev_to_node(dev->dev.parent) : -1; struct sk_buff *skb; - skb = __alloc_skb(length + NET_SKB_PAD, gfp_mask, 0, node); + skb = __alloc_skb(length + NET_SKB_PAD, gfp_mask, SKB_ALLOC_RX, node); if (likely(skb)) { skb_reserve(skb, NET_SKB_PAD); skb->dev = dev; @@ -268,10 +295,34 @@ struct page *__netdev_alloc_page(struct int node = dev->dev.parent ? dev_to_node(dev->dev.parent) : -1; struct page *page; +#ifdef CONFIG_NETVM + gfp_mask |= __GFP_NOMEMALLOC | __GFP_NOWARN; +#endif + page = alloc_pages_node(node, gfp_mask, 0); + +#ifdef CONFIG_NETVM + if (!page && rx_emergency_get(PAGE_SIZE)) { + gfp_mask &= ~(__GFP_NOMEMALLOC | __GFP_NOWARN); + gfp_mask |= __GFP_MEMALLOC; + page = alloc_pages_node(node, gfp_mask, 0); + if (!page) + rx_emergency_put(PAGE_SIZE); + } +#endif + return page; } +void __netdev_free_page(struct net_device *dev, struct page *page) +{ +#ifdef CONFIG_NETVM + if (unlikely(page->reserve)) + rx_emergency_put(PAGE_SIZE); +#endif + __free_page(page); +} + void skb_add_rx_frag(struct sk_buff *skb, int i, struct page *page, int off, int size) { @@ -279,6 +330,34 @@ void skb_add_rx_frag(struct sk_buff *skb skb->len += size; skb->data_len += size; skb->truesize += size; + +#ifdef CONFIG_NETVM + /* + * Fix-up the emergency accounting; make sure all pages match + * skb->emergency. + * + * This relies on page->reserve to be preserved between + * the call to __netdev_alloc_page() and this call. + */ + if (skb_emergency(skb)) { + /* + * If the page was not an emergency alloc (ALLOC_NO_WATERMARK) + * we can use overcommit accounting, since we already have the + * memory. + */ + if (!page->reserve) + rx_emergency_get_overcommit(PAGE_SIZE); + atomic_set(&page->frag_count, 1); + } else if (unlikely(page->reserve)) { + /* + * Rare case; the skb wasn't allocated under pressure but + * the page was. We need to return the page. This can offset + * the accounting a little, but its a constant shift, it does + * not accumulate. + */ + rx_emergency_put(PAGE_SIZE); + } +#endif } static void skb_drop_list(struct sk_buff **listp) @@ -307,21 +386,45 @@ static void skb_clone_fraglist(struct sk skb_get(list); } +static inline void skb_get_page(struct sk_buff *skb, struct page *page) +{ + get_page(page); + if (skb_emergency(skb)) + atomic_inc(&page->frag_count); +} + +static inline void skb_put_page(struct sk_buff *skb, struct page *page) +{ + if (skb_emergency(skb) && atomic_dec_and_test(&page->frag_count)) + rx_emergency_put(PAGE_SIZE); + put_page(page); +} + static void skb_release_data(struct sk_buff *skb) { if (!skb->cloned || !atomic_sub_return(skb->nohdr ? (1 << SKB_DATAREF_SHIFT) + 1 : 1, &skb_shinfo(skb)->dataref)) { + int size; + +#ifdef NET_SKBUFF_DATA_USES_OFFSET + size = skb->end; +#else + size = skb->end - skb->head; +#endif + if (skb_shinfo(skb)->nr_frags) { int i; for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) - put_page(skb_shinfo(skb)->frags[i].page); + skb_put_page(skb, skb_shinfo(skb)->frags[i].page); } if (skb_shinfo(skb)->frag_list) skb_drop_fraglist(skb); kfree(skb->head); + if (skb_emergency(skb)) + rx_emergency_put(size); } } @@ -440,6 +543,9 @@ struct sk_buff *skb_clone(struct sk_buff n->fclone = SKB_FCLONE_CLONE; atomic_inc(fclone_ref); } else { + if (skb_emergency(skb)) + gfp_mask |= __GFP_MEMALLOC; + n = kmem_cache_alloc(skbuff_head_cache, gfp_mask); if (!n) return NULL; @@ -477,6 +583,7 @@ struct sk_buff *skb_clone(struct sk_buff #if defined(CONFIG_IP_VS) || defined(CONFIG_IP_VS_MODULE) C(ipvs_property); #endif + C(emergency); C(protocol); n->destructor = NULL; C(mark); @@ -565,6 +672,14 @@ static void copy_skb_header(struct sk_bu skb_shinfo(new)->gso_type = skb_shinfo(old)->gso_type; } +static inline int skb_alloc_rx_flag(const struct sk_buff *skb) +{ + if (skb_emergency(skb)) + return SKB_ALLOC_RX; + + return 0; +} + /** * skb_copy - create private copy of an sk_buff * @skb: buffer to copy @@ -585,15 +700,17 @@ static void copy_skb_header(struct sk_bu struct sk_buff *skb_copy(const struct sk_buff *skb, gfp_t gfp_mask) { int headerlen = skb->data - skb->head; + int size; /* * Allocate the copy buffer */ struct sk_buff *n; #ifdef NET_SKBUFF_DATA_USES_OFFSET - n = alloc_skb(skb->end + skb->data_len, gfp_mask); + size = skb->end + skb->data_len; #else - n = alloc_skb(skb->end - skb->head + skb->data_len, gfp_mask); + size = skb->end - skb->head + skb->data_len; #endif + n = __alloc_skb(size, gfp_mask, skb_alloc_rx_flag(skb), -1); if (!n) return NULL; @@ -628,12 +745,14 @@ struct sk_buff *pskb_copy(struct sk_buff /* * Allocate the copy buffer */ + int size; struct sk_buff *n; #ifdef NET_SKBUFF_DATA_USES_OFFSET - n = alloc_skb(skb->end, gfp_mask); + size = skb->end; #else - n = alloc_skb(skb->end - skb->head, gfp_mask); + size = skb->end - skb->head; #endif + n = __alloc_skb(size, gfp_mask, skb_alloc_rx_flag(skb), -1); if (!n) goto out; @@ -652,8 +771,9 @@ struct sk_buff *pskb_copy(struct sk_buff int i; for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) { - skb_shinfo(n)->frags[i] = skb_shinfo(skb)->frags[i]; - get_page(skb_shinfo(n)->frags[i].page); + skb_frag_t *frag = &skb_shinfo(skb)->frags[i]; + skb_shinfo(n)->frags[i] = *frag; + skb_get_page(n, frag->page); } skb_shinfo(n)->nr_frags = i; } @@ -701,6 +821,14 @@ int pskb_expand_head(struct sk_buff *skb size = SKB_DATA_ALIGN(size); + if (skb_emergency(skb)) { + if (rx_emergency_get(size)) + gfp_mask |= __GFP_MEMALLOC; + else + goto nodata; + } else + gfp_mask |= __GFP_NOMEMALLOC; + data = kmalloc(size + sizeof(struct skb_shared_info), gfp_mask); if (!data) goto nodata; @@ -716,7 +844,7 @@ int pskb_expand_head(struct sk_buff *skb sizeof(struct skb_shared_info)); for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) - get_page(skb_shinfo(skb)->frags[i].page); + skb_get_page(skb, skb_shinfo(skb)->frags[i].page); if (skb_shinfo(skb)->frag_list) skb_clone_fraglist(skb); @@ -795,8 +923,8 @@ struct sk_buff *skb_copy_expand(const st /* * Allocate the copy buffer */ - struct sk_buff *n = alloc_skb(newheadroom + skb->len + newtailroom, - gfp_mask); + struct sk_buff *n = __alloc_skb(newheadroom + skb->len + newtailroom, + gfp_mask, skb_alloc_rx_flag(skb), -1); int oldheadroom = skb_headroom(skb); int head_copy_len, head_copy_off; int off; @@ -913,7 +1041,7 @@ drop_pages: skb_shinfo(skb)->nr_frags = i; for (; i < nfrags; i++) - put_page(skb_shinfo(skb)->frags[i].page); + skb_put_page(skb, skb_shinfo(skb)->frags[i].page); if (skb_shinfo(skb)->frag_list) skb_drop_fraglist(skb); @@ -1082,7 +1210,7 @@ pull_pages: k = 0; for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) { if (skb_shinfo(skb)->frags[i].size <= eat) { - put_page(skb_shinfo(skb)->frags[i].page); + skb_put_page(skb, skb_shinfo(skb)->frags[i].page); eat -= skb_shinfo(skb)->frags[i].size; } else { skb_shinfo(skb)->frags[k] = skb_shinfo(skb)->frags[i]; @@ -1854,6 +1982,7 @@ static inline void skb_split_no_header(s skb_shinfo(skb1)->frags[k] = skb_shinfo(skb)->frags[i]; if (pos < len) { + struct page *page = skb_shinfo(skb)->frags[i].page; /* Split frag. * We have two variants in this case: * 1. Move all the frag to the second @@ -1862,7 +1991,7 @@ static inline void skb_split_no_header(s * where splitting is expensive. * 2. Split is accurately. We make this. */ - get_page(skb_shinfo(skb)->frags[i].page); + skb_get_page(skb1, page); skb_shinfo(skb1)->frags[0].page_offset += len - pos; skb_shinfo(skb1)->frags[0].size -= len - pos; skb_shinfo(skb)->frags[i].size = len - pos; @@ -2193,7 +2322,8 @@ struct sk_buff *skb_segment(struct sk_bu if (hsize > len || !sg) hsize = len; - nskb = alloc_skb(hsize + doffset + headroom, GFP_ATOMIC); + nskb = __alloc_skb(hsize + doffset + headroom, GFP_ATOMIC, + skb_alloc_rx_flag(skb), -1); if (unlikely(!nskb)) goto err; @@ -2238,7 +2368,7 @@ struct sk_buff *skb_segment(struct sk_bu BUG_ON(i >= nfrags); *frag = skb_shinfo(skb)->frags[i]; - get_page(frag->page); + skb_get_page(nskb, frag->page); size = frag->size; if (pos < offset) { @@ -2483,6 +2613,7 @@ EXPORT_SYMBOL(__pskb_pull_tail); EXPORT_SYMBOL(__alloc_skb); EXPORT_SYMBOL(__netdev_alloc_skb); EXPORT_SYMBOL(__netdev_alloc_page); +EXPORT_SYMBOL(__netdev_free_page); EXPORT_SYMBOL(skb_add_rx_frag); EXPORT_SYMBOL(pskb_copy); EXPORT_SYMBOL(pskb_expand_head); Index: linux-2.6/include/linux/mm_types.h =================================================================== --- linux-2.6.orig/include/linux/mm_types.h +++ linux-2.6/include/linux/mm_types.h @@ -71,6 +71,7 @@ struct page { pgoff_t index; /* Our offset within mapping. */ void *freelist; /* SLUB: freelist req. slab lock */ int reserve; /* page_alloc: page is a reserve page */ + atomic_t frag_count; /* skb fragment use count */ }; struct list_head lru; /* Pageout list, eg. active_list * protected by zone->lru_lock ! -- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/