| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <4921B521.1010305@candelatech.com> Date: Mon, 17 Nov 2008 10:17:05 -0800 From: Ben Greear <greearb@...delatech.com> To: David Miller <davem@...emloft.net> CC: netdev@...r.kernel.org, Patrick McHardy <kaber@...sh.net> Subject: Re: ARP table question David Miller wrote: > This change makes a lot of sense to me, I'll add it to net-next-2.6 > so it can cook in there for a while just in case there are some > unwanted side-effects. Thanks Dave. I think I found another problem as well: If I start 1 TCP and 1 UDP connection between each of the 500 interfaces on mac-vlans, the ARP tables will not converge. It seems to be because mac-vlan has to copy broadcast packets to every mac-vlan on a physical device, there are just too many packets: 500 vlans arping once per second means 500 pkts per second on the other NIC. Other NIC must copy these 500 times, so, 250000 packets per second in each direction are processed by the stack (they are not all on the wire, at least). A few get through and those UDP/TCP connections start consuming bandwidth, which clogs up the 1G link enough that other responses are lost most of the time. I'm going to try to work on some sort of random backoff for ARP that can be enabled in this situation next. Thanks, Ben -- Ben Greear <greearb@...delatech.com> Candela Technologies Inc http://www.candelatech.com -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists