<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@宋体";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:微软雅黑;
panose-1:2 11 5 3 2 2 4 2 2 4;}
@font-face
{font-family:"\@微软雅黑";
panose-1:2 11 5 3 2 2 4 2 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:宋体;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-CN link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:#1F497D'>Just let you guys know, this is indeed a common bug of openstack, <a href="https://bugs.launchpad.net/neutron/+bug/1732067">https://bugs.launchpad.net/neutron/+bug/1732067</a> has more info, but there isn’t a real fix patch, current merged fix patch is just a workaround, it doesn’t fix MAC learn issue.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"微软雅黑",sans-serif'>发件人<span lang=EN-US>:</span></span></b><span lang=EN-US style='font-size:11.0pt;font-family:"微软雅黑",sans-serif'> Satish Patel [mailto:satish.txt@gmail.com] <br></span><b><span style='font-size:11.0pt;font-family:"微软雅黑",sans-serif'>发送时间<span lang=EN-US>:</span></span></b><span lang=EN-US style='font-size:11.0pt;font-family:"微软雅黑",sans-serif'> 2020</span><span style='font-size:11.0pt;font-family:"微软雅黑",sans-serif'>年<span lang=EN-US>2</span>月<span lang=EN-US>24</span>日<span lang=EN-US> 7:10<br></span><b>收件人<span lang=EN-US>:</span></b><span lang=EN-US> Donny Davis <donny@fortnebula.com><br></span><b>抄送<span lang=EN-US>:</span></b><span lang=EN-US> Yi Yang (</span>杨燚<span lang=EN-US>)-</span>云服务集团<span lang=EN-US> <yangyi01@inspur.com>; openstack-discuss@lists.openstack.org<br></span><b>主题<span lang=EN-US>:</span></b><span lang=EN-US> Re: [neutron] Why network performance is extremely bad and linearly related with number of VMs?<o:p></o:p></span></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US>What is max age time in Linux bridge? If it’s zero then it won’t learn Mac and flush arp table. <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US>Sent from my iPhone<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><br><br><o:p></o:p></span></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US>On Feb 23, 2020, at 12:52 AM, Donny Davis <<a href="mailto:donny@fortnebula.com">donny@fortnebula.com</a>> wrote:<o:p></o:p></span></p></blockquote></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span lang=EN-US style='font-family:"Tahoma",sans-serif'></span><span lang=EN-US><o:p></o:p></span></p><div><div><p class=MsoNormal><span lang=EN-US>So I am curious as to what your question is. Are you asking about ovs bridges learning MAC's of other compute nodes or why network performance is affected when you run more than one instance per node. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>I have not observed this behaviour in my experience. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Could you tell us more about the configuration of your deployment?<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>I understand you are currently using linux bridges that are connected to openvswitch bridges? Why not just use ovs? OVS can handle security groups.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><div><p class=MsoNormal><span lang=EN-US>On Fri, Feb 21, 2020 at 9:48 AM Yi Yang (</span>杨燚<span lang=EN-US>)-</span>云服务集团<span lang=EN-US> <<a href="mailto:yangyi01@inspur.com">yangyi01@inspur.com</a>> wrote:<o:p></o:p></span></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><p class=MsoNormal><span lang=EN-US>Hi, All<br><br>Anybody has noticed network performance between VMs is extremely bad, it is<br>basically linearly related with numbers of VMs in same compute node. In my<br>case, if I launch one VM per compute node and run iperf3 tcp and udp,<br>performance is good, it is about 4Gbps and 1.7Gbps, for 16 bytes small UDP<br>packets, it can reach 180000 pps (packets per second), but if I launch two<br>VMs per compute node (note: they are in the same subnet) and only run pps<br>test case, that will be decrease to about 90000 pps, if I launch 3 VMs per<br>compute node, that will be about 50000 pps, I tried to find out the root<br>cause, other VMs in this subnet (they are in the same compute node as iperf3<br>client) can receive all the packets iperf3 client VM sent out although<br>destination MAC isn’t broadcast MAC or multicast MAC, actually it is MAC of<br>iperf3 server VM in another compute node, by further check, I did find qemu<br>instances of these VMs have higher CPU utilization and corresponding vhost<br>kernel threads also also higher CPU utilization, to be importantly, I did<br>find ovs was broadcasting these packets because all the ovs bridges didn’t<br>learn this destination MAC. I tried this in Queens and Rocky, the same issue<br>is there. By the way, we’re using linux bridge for security group, so VM<br>tap interface is attached into linux bridge which is connected to br-int by<br>veth pair.<br><br>Here is output of “ovs-appctl dpif/dump-flows br-int” after I launched<br>many VMs:<br><br>recirc_id(0),in_port(12),eth(src=fa:16:3e:49:26:51,dst=fa:16:3e:a7:0a:3a),et<br>h_type(0x0800),ipv4(tos=0/0x3,frag=no), packets:11012944, bytes:726983412,<br>used:0.000s, flags:SP.,<br>actions:push_vlan(vid=1,pcp=0),2,set(tunnel(tun_id=0x49,src=10.3.2.17,dst=10<br>.3.2.16,ttl=64,tp_dst=4789,flags(df|key))),pop_vlan,9,8,11,13,14,15,16,17,18<br>,19<br><br>$ sudo ovs-appctl fdb/show br-floating | grep fa:16:3e:49:26:51<br>$ sudo ovs-appctl fdb/show br-tun | grep fa:16:3e:49:26:51<br>$ sudo ovs-appctl fdb/show br-bond1 | grep fa:16:3e:49:26:51<br>$ sudo ovs-appctl fdb/show br-int | grep fa:16:3e:49:26:51<br><br>All the bridges can’t learn this MAC.<br><br>My question is why ovs bridges can’t learn MACs of other compute nodes, is<br>this common issue of all the Openstack versions? Is there any known existing<br>way to fix it? Look forward to hearing your insights and solutions, thank<br>you in advance and have a good day.<o:p></o:p></span></p></blockquote></div><p class=MsoNormal><span lang=EN-US><br clear=all><br>-- <o:p></o:p></span></p><div><div><div><p class=MsoNormal><span lang=EN-US>~/DonnyD<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>C: 805 814 6800<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"No mission too difficult. No sacrifice too great. Duty First"<o:p></o:p></span></p></div></div></div></div></blockquote></div></body></html>