Re: performance of jailed processes

From: Julian Elischer (julian_at_elischer.org)
Date: 03/30/04

  • Next message: FreeBSD Tinderbox: "[current tinderbox] failure on powerpc/powerpc"
    Date: Tue, 30 Mar 2004 10:30:54 -0800
    To: Dag-Erling 翽 <des@des.no>
    
    

    Dag-Erling Smørgrav wrote:
    > Can anyone explain why jailed processes seem to perform much worse
    > than non-jailed processes in recent -CURRENT?
    >
    > Specifically, running a query against a remote MySQL server from
    > inside a jail takes an order of magnitude more time than from outside
    > the jail. Tcpdump shows that the TCP packets carrying the result are
    > evenly spaced, so this is not a matter of the server timing out on a
    > DNS lookup or anything like that.
    >
    > Running a configure script also takes much longer inside the jail than
    > outisde, and again, progress is even (though slow), so it is clearly
    > not a matter of DNS timing out.
    >
    > There is no NFS or NIS in the equation either. Parts of the file
    > space inside the jail is a nullfs mount, but we've also tried without
    > nullfs.
    >
    > The system currently uses SCHED_ULE, but we had similar trouble with
    > SCHED_4BSD on 5.1-RELEASE before we went -CURRENT.
    >
    > The machine currently has ~2600 processes running in ~400 jails. Is
    > it conceivable that be scalability issues, perhaps in the credentials
    > code, could cause vastly increased syscall overhead for jailed

    that suggests 400 addresses, which suggests that lots of linked lists are being
    traversed for received packets..

    > processes?
    >
    > DES

    -- 
    +------------------------------------+       ______ _  __
    |   __--_|\  Julian Elischer         |       \     U \/ / hard at work in
    |  /       \ julian@elischer.org     +------>x   USA    \ a very strange
    | (   OZ    )                                \___   ___ | country !
    +- X_.---._/    presently in San Francisco       \_/   \\
               v
    _______________________________________________
    freebsd-current@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-current
    To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
    

  • Next message: FreeBSD Tinderbox: "[current tinderbox] failure on powerpc/powerpc"

    Relevant Pages

    • performance of jailed processes
      ... Can anyone explain why jailed processes seem to perform much worse ... running a query against a remote MySQL server from ... inside a jail takes an order of magnitude more time than from outside ... space inside the jail is a nullfs mount, ...
      (freebsd-current)
    • Re: performance of jailed processes
      ... running a query against a remote MySQL server from ... > inside a jail takes an order of magnitude more time than from outside ... so this is not a matter of the server timing out on a ... > DNS lookup or anything like that. ...
      (freebsd-current)
    • jail and chflags [patch]
      ... I trust these jailed processes, as I'm using jails to allow different ... More confusingly it seems that chflags IS allowed in -current jails ... chflags is permitted in a jail.. ... should return 0 for a jailed root and thus allow it... ...
      (freebsd-current)
    • Re: Sharing directories with jails
      ... I am using the jails to give other access to a freebsd system. ... starts up so the link inside the jail will wind up pointing to itself. ... I actually have a separate jail for the NFS server and export everything ... You do know that giving the jailed processes access ...
      (freebsd-questions)