Date: Thu, 8 Apr 2010 11:07:52 -0700 From: "K. Macy" <kmacy@freebsd.org> To: Vincent Hoffman <vince@unsane.co.uk> Cc: freebsd-net@freebsd.org Subject: Re: kern/144917: Flowtable crashes system Message-ID: <j2y82c4140e1004081107p708ecfd6ud1f155c3e1077fbe@mail.gmail.com> In-Reply-To: <4BBDD49E.4010805@unsane.co.uk> References: <31285.63437.qm@web63906.mail.re1.yahoo.com> <4BBDD49E.4010805@unsane.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Vincent, Thanks for your response. However, the answers to both his questions have been given many times before and he knows them already. This person has not made material contributions to discussions and has in fact made active efforts to reduce the signal to noise ratio. Cheers, Kip On Thu, Apr 8, 2010 at 6:05 AM, Vincent Hoffman <vince@unsane.co.uk> wrote: > On 08/04/2010 13:07, Barney Cordoba wrote: >> >> --- On Fri, 4/2/10, K. Macy <kmacy@freebsd.org> wrote: >> >> >>> From: K. Macy <kmacy@freebsd.org> >>> Subject: Re: kern/144917: Flowtable crashes system >>> To: "Ilya Zhuravlev" <ilya@el-crane.net> >>> Cc: freebsd-net@freebsd.org, "Evgenii Davidov" <dado@korolev-net.ru> >>> Date: Friday, April 2, 2010, 11:07 PM >>> Please try with the latest 8-STABLE >>> and tell me if recent changes fix it. >>> >>> Thanks, >>> Kip >>> >>> On Thu, Mar 25, 2010 at 8:32 AM, Ilya Zhuravlev <ilya@el-crane.net> >>> wrote: >>> >>>> On 21.03.2010 17:04, Evgenii Davidov wrote: >>>> >>>>> =FA=C4=D2=C1=D7=D3=D4=D7=D5=CA=D4=C5, >>>>> >>>>> On Sat, Mar 20, 2010 at 11:06:35PM +0000, Doychin >>>>> >>> Dokov =D0=C9=DB=C5=D4: >>> >>>>> >>>>>>> Description: >>>>>>> >>>>>> It seems like flowtable has been merged and >>>>>> >>> enabled by default in 8.0.... >>> >>>>>> which is a really really bad idea. >>>>>> On a system which handles two full BGP tables >>>>>> >>> it makes one of the CPU >>> >>>>>> cores run at 100% right after most of the >>>>>> >>> prefixes get installed in the >>> >>>>>> routing table. >>>>>> >>>>> i saw the same effect with ospf >>>>> >>>>> >>>> 8.0-p2, 2 full-view with openbgpd >>>> "tuning": >>>> net.inet.tcp.blackhole=3D2 >>>> net.inet.udp.blackhole=3D1 >>>> net.inet.icmp.icmplim_output=3D0 >>>> net.inet.icmp.drop_redirect=3D1 >>>> net.inet.flowtable.nmbflows=3D32768 >>>> >>>> 1 week uptime.Now I think only about increasing tx/rx >>>> >>> descriptors to reduce >>> >>>> interrupts (default values was not changed) >>>> >>>> >>>> netstat -w1 -Iigb0 >>>> =9A =9A =9A =9A =9A =9Ainput =9A =9A =9A =9A (igb0) >>>> >>> =9A output >>> >>>> =9A packets =9Aerrs =9A =9A =9Abytes =9A =9Apackets =9Aerrs >>>> >>> =9A =9Abytes colls >>> >>>> =9A =9A 49100 =9A =9A 0 =9A 12290513 =9A =9A =9A23693 =9A =9A 0 >>>> >>> =9A 27268884 =9A =9A 0 >>> >>>> =9A =9A 48322 =9A =9A 0 =9A 12688283 =9A =9A =9A24332 =9A =9A 0 >>>> >>> =9A 28099404 =9A =9A 0 >>> >>>> =9A =9A 50602 =9A =9A 0 =9A 12759620 =9A =9A =9A24437 =9A =9A 0 >>>> >>> =9A 27698341 =9A =9A 0 >>> >>>> =9A =9A 47857 =9A =9A 0 =9A 11354124 =9A =9A =9A21410 =9A =9A 0 >>>> >>> =9A 23845155 =9A =9A 0 >>> >>>> netstat -w1 -Iigb1 >>>> =9A =9A =9A =9A =9A =9Ainput =9A =9A =9A =9A (igb1) >>>> >>> =9A output >>> >>>> =9A packets =9Aerrs =9A =9A =9Abytes =9A =9Apackets =9Aerrs >>>> >>> =9A =9Abytes colls >>> >>>> =9A =9A 32428 =9A =9A 0 =9A 35027019 =9A =9A =9A24562 =9A =9A 0 >>>> >>> =9A =9A5624934 =9A =9A 0 >>> >>>> =9A =9A 30621 =9A =9A 0 =9A 33384339 =9A =9A =9A23569 =9A =9A 0 >>>> >>> =9A =9A4456944 =9A =9A 0 >>> >>>> =9A =9A 28419 =9A =9A 0 =9A 31014269 =9A =9A =9A21571 =9A =9A 0 >>>> >>> =9A =9A3638083 =9A =9A 0 >>> >>>> =9A =9A 29409 =9A =9A 0 =9A 32524760 =9A =9A =9A22137 =9A =9A 0 >>>> >>> =9A =9A3503600 =9A =9A 0 >>> >>>> =9A =9A 30965 =9A =9A 0 =9A 33532742 =9A =9A =9A23973 =9A =9A 0 >>>> >>> =9A =9A5089231 =9A =9A 0 >>> >>>> netstat -w1 -Iem0 >>>> =9A =9A =9A =9A =9A =9Ainput =9A =9A =9A =9A =9A(em0) >>>> >>> =9A output >>> >>>> =9A packets =9Aerrs =9A =9A =9Abytes =9A =9Apackets =9Aerrs >>>> >>> =9A =9Abytes colls >>> >>>> =9A =9A 17217 =9A =9A 0 =9A =9A3929366 =9A =9A =9A72741 =9A =9A 0 >>>> >>> =9A 46377762 =9A =9A 0 >>> >>>> =9A =9A 17412 =9A =9A 0 =9A =9A3745112 =9A =9A =9A75522 =9A =9A 0 >>>> >>> =9A 49338883 =9A =9A 0 >>> >>>> =9A =9A 18385 =9A =9A 0 =9A =9A4014568 =9A =9A =9A77444 =9A =9A 0 >>>> >>> =9A 50532101 =9A =9A 0 >>> >>>> =9A =9A 17142 =9A =9A 0 =9A =9A3875518 =9A =9A =9A77125 =9A =9A 0 >>>> >>> =9A 47646681 =9A =9A 0 >>> >>>> =9A =9A 16870 =9A =9A 0 =9A =9A3528316 =9A =9A =9A73188 =9A =9A 0 >>>> >>> =9A 47940959 =9A =9A 0 >>> >>>> =9A =9A 17069 =9A =9A 0 =9A =9A3682891 =9A =9A =9A80268 =9A =9A 0 >>>> >>> =9A 52904747 =9A =9A 0 >>> >>>> =9A =9A 17313 =9A =9A 0 =9A =9A4101576 =9A =9A =9A75586 =9A =9A 0 >>>> >>> =9A 51933330 =9A =9A 0 >>> >>>> _______________________________________________ >>>> freebsd-net@freebsd.org >>>> >> >> How about telling us how to turn it off; or better yet how to not >> compile it into the kernel at all. Thats the best solution. >> >> As my Dad used to say on a regular basis, we need this like we >> need a hole in our head. Is 8.0 the Kip Macy personal test bed? >> >> Why is something that virtually no-one needs enabled by default? >> >> Barney >> >> > I havent followed the whole thread so if this doesnt actally work for > some reason then sorry for noise. > > [root@prawn ~]# sysctl -a | grep flowtable > net.inet.ip.output_flowtable_size: 2048 > net.inet.flowtable.nmbflows: 4096 > net.inet.flowtable.tcp_expire: 86400 > net.inet.flowtable.fin_wait_expire: 600 > net.inet.flowtable.udp_expire: 300 > net.inet.flowtable.syn_expire: 300 > net.inet.flowtable.collisions: 0 > net.inet.flowtable.max_depth: 0 > net.inet.flowtable.free_checks: 8845 > net.inet.flowtable.frees: 2181 > net.inet.flowtable.misses: 2403 > net.inet.flowtable.lookups: 11633 > net.inet.flowtable.hits: 9231 > net.inet.flowtable.enable: 1 > net.inet.flowtable.debug: 0 > > > [root@prawn ~]# sysctl -d net.inet.flowtable.enable > net.inet.flowtable.enable: enable flowtable caching. > > [root@prawn ~]# sysctl net.inet.flowtable.enable=3D0 > net.inet.flowtable.enable: 1 -> 0 > > > Vince >> >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >> > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?j2y82c4140e1004081107p708ecfd6ud1f155c3e1077fbe>