From owner-freebsd-current@FreeBSD.ORG Mon Mar 19 11:34:08 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 9160F16A409 for ; Mon, 19 Mar 2007 11:34:08 +0000 (UTC) (envelope-from ianf@clue.co.za) Received: from munchkin.clue.co.za (munchkin.clue.co.za [66.219.59.160]) by mx1.freebsd.org (Postfix) with ESMTP id 51F7B13C4BF for ; Mon, 19 Mar 2007 11:34:08 +0000 (UTC) (envelope-from ianf@clue.co.za) DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=20070313; d=clue.co.za; h=Received:Received:Received:To:cc:From:Subject:In-Reply-To:X-Attribution:Date:Message-Id; b=jBveoln9Xz+lGqbu/39PyPYrRyw/RE8C+LOaLaPpFyQpfoJdaQzFsSK1sjXdh6A7UT6ymCcV19t40AhZ4FPrwfU2ZIdrJqOwGagfner/RZW64u/oVdzoabBbajavUIyfDobpbJYW2DEnLdYIuAzuIW4jNdHKlyVQib9HSqRi1QRUbFaBOh2TP0dwWHi+2K5xcI4yEagsJW1zbifGcNM8EqQzYwUCVsjCl7ma3GED3GyQvVlBdUeimTG13k0IW23z; Received: from uucp by munchkin.clue.co.za with local (Exim 4.66) (envelope-from ) id 1HTG7r-0002he-28; Mon, 19 Mar 2007 11:34:07 +0000 Received: from cluetoy.clue.co.za ([10.0.0.19] helo=clue.co.za) by urchin.clue.co.za with esmtpa (Exim 4.66) (envelope-from ) id 1HTG7Z-0004CG-0g; Mon, 19 Mar 2007 11:33:49 +0000 Received: from localhost ([127.0.0.1]) by clue.co.za with esmtp (Exim 4.66 (FreeBSD)) (envelope-from ) id 1HTG7Y-0005RL-43; Mon, 19 Mar 2007 13:33:48 +0200 To: Julian Elischer From: Ian FREISLICH In-Reply-To: Message from Julian Elischer of "Sun, 18 Mar 2007 11:46:30 MST." <45FD8906.2060700@elischer.org> X-Attribution: BOFH Date: Mon, 19 Mar 2007 13:33:48 +0200 Message-Id: Cc: "Bjoern A. Zeeb" , freebsd-current@freebsd.org, Robert Watson , Tillman Hodgson Subject: Re: Experiencing hangs on SMP box with no console messages given for clues. Details inside. X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2007 11:34:08 -0000 Julian Elischer wrote: > Robert Watson wrote: > > > > On Sun, 18 Mar 2007, Bjoern A. Zeeb wrote: > > > >> On Sun, 11 Mar 2007, Tillman Hodgson wrote: > >> > >>> On Sat, Mar 10, 2007 at 10:40:33PM -0600, Tillman Hodgson wrote: > >>>> Shouldn't take more than a day or two to get the info requested in > >>>> 11.9. > >>> > >>> As it turns out, a few hours. > >>> > >>> After capturing the information below I ran `panic`. While booting, > >>> the following lock messages came up -- I thought it might be related > >>> so I'll post it here: > > > > If using uid/gid firewall rules, make sure to read the pertinent man > > pages regarding setting debug.mpsafenet=0 in loader.conf to avoid > > deadlocks. This is only a workaround for the issue, and when > > debug.mpsafenet is removed, this workaround will no longer be > > available. The authors/maintainers of the various firewall packages > > need to correct these problems or the lock order reversals (and > > associated deadlocks) will persist. > > I actually have some work on this in an experimental branch.. > it removes the requirement for users of ipfw to hold a lock on it > by making the firewall table an array rather than a lined list and then > using a read-copy-replace write semantic with reference conts on the array.. > a bit like the cred structures that processes and threads have.. > i.e. you never change it, just replace it with a new one.. > previosu users ofthe structure just keep using the one they have > and release the reference when they are done.. (freeing if it goes to 0). Any chance I can get a copy of the patch? I have some other optimizations in production and I'd like to see how this merges and whether it improves performance in SMP filtering. Ian -- Ian Freislich