netdev - Re: [RFC] net: ipv4 -- Introduce ifa limit per net

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160309165850.GA49579@ast-mbp.thefacebook.com>
Date:	Wed, 9 Mar 2016 08:58:52 -0800
From:	Alexei Starovoitov <alexei.starovoitov@...il.com>
To:	Cyrill Gorcunov <gorcunov@...il.com>
Cc:	Eric Dumazet <eric.dumazet@...il.com>,
	David Miller <davem@...emloft.net>, netdev@...r.kernel.org,
	solar@...nwall.com, vvs@...tuozzo.com, avagin@...tuozzo.com,
	xemul@...tuozzo.com, vdavydov@...tuozzo.com, khorenko@...tuozzo.com
Subject: Re: [RFC] net: ipv4 -- Introduce ifa limit per net

On Wed, Mar 09, 2016 at 07:39:19PM +0300, Cyrill Gorcunov wrote:
> On Sun, Mar 06, 2016 at 08:06:41PM +0300, Cyrill Gorcunov wrote:
> > > 
> > > Well, this looks like LOCKDEP kernel. Are you really running LOCKDEP on
> > > production kernels ?
> > 
> 
> Hi Eric, David. Sorry for the delay. Finally I've measured the
> latency on the hw. It's i7-2600 cpu with 16G of memory. Here
> are the collected data.
> 
> ---
> Unpatched vanilla
> =================
> 
> commit 7f02bf6b5f5de90b7a331759b5364e41c0f39bf9
> Author: Linus Torvalds <torvalds@...ux-foundation.org>
> Date:   Tue Mar 8 09:41:20 2016 -0800
> 
>  Creating new addresses
>  ----------------------
>   19.26%  [kernel]                      [k] check_lifetime
>   13.88%  [kernel]                      [k] __inet_insert_ifa
>   13.01%  [kernel]                      [k] inet_rtm_newaddr
> 
>  Release
>  -------
>   20.96%  [kernel]                    [k] _raw_spin_lock
>   17.79%  [kernel]                    [k] preempt_count_add

above line is an indication that you have:
#if defined(CONFIG_DEBUG_PREEMPT) || defined(CONFIG_PREEMPT_TRACER)
turning it off will speed up things significantly.

>   14.79%  [kernel]                    [k] __local_bh_enable_ip
>   13.08%  [kernel]                    [k] preempt_count_sub
>    9.21%  [kernel]                    [k] nf_ct_iterate_cleanup
>    3.15%  [kernel]                    [k] _raw_spin_unlock
>    2.80%  [kernel]                    [k] nf_conntrack_lock
>    2.67%  [kernel]                    [k] in_lock_functions
>    2.63%  [kernel]                    [k] get_parent_ip
>    2.26%  [kernel]                    [k] __inet_del_ifa
>    2.17%  [kernel]                    [k] fib_del_ifaddr
>    1.77%  [kernel]                    [k] _cond_resched