Re: performance of jailed processes

From: Robert Watson (rwatson_at_FreeBSD.org)
Date: 03/31/04

  • Next message: Dag-Erling Smørgrav: "Re: performance of jailed processes" 
    Date: Tue, 30 Mar 2004 20:27:04 -0500 (EST)
To: Dag-Erling Smørgrav <des@des.no>

    On Wed, 31 Mar 2004, Dag-Erling Smørgrav wrote:

    > Robert Watson <rwatson@FreeBSD.org> writes:
    > > I'd be very interested in knowing if changing your application to bind
    > > alternative IP addresses rather than using jail to force the binding to an
    > > alternative address changes the performance results. I.e., are we looking
    > > at a problem with additional aliases and not a problem with jail at all...
    >
    > I reproduced the problem with scp, then threw in -oBindAddress=foo. It
    > seems you're on to something; running it outside any jail but bound to
    > one of the aliases gave the same symptoms as running it from inside a
    > jail.

    Are your aliases configured on lo0, or on the ethernet interface? Could
    we see some excerpted ifconfig output for your interface (perhaps only ten
    -- first five, last five of the 2000+ IP addresses :-).

    Robert N M Watson FreeBSD Core Team, TrustedBSD Projects
    robert@fledge.watson.org Senior Research Scientist, McAfee Research

    _______________________________________________
    freebsd-current@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-current
    To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"

  • Next message: Dag-Erling Smørgrav: "Re: performance of jailed processes"

    Relevant Pages

    • Re: performance of jailed processes
      ... > I'd be very interested in knowing if changing your application to bind ... > at a problem with additional aliases and not a problem with jail at all... ...
      (freebsd-current)
    • right in search of drunk art
      ... Hassan's selection. ... I bind once, invent shyly, then release ... in conjunction with the plastic as for the jail. ...
      (sci.crypt)
    • Re: chroot versus jail for the name daemon
      ... > assuming named is running as user and group bind (rather than as root)? ... > 3) What happens if named is broken while in a jail, ... That means an attacker can set things up so ...
      (freebsd-questions)
    • Re: BIND inside a jail on FreeBSD 6.0
      ... devfs rule: ioctl DEVFSIO_RAPPLY: Operation not permitted ... (I realize that BIND already runs in a chroot'd environment, ... I tried mounting the devfs outside the jail to the jail's ...
      (freebsd-questions)
    • Re: INADDR_ANY bind in a multiip jail
      ... the pcb structure on jail bases. ... But is it also possible to bind in two jails the same port with inaddr_any? ...
      (freebsd-net)