<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<STYLE type=text/css> <!--@import url(scrollbar.css); --></STYLE>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<STYLE> body{FONT-SIZE:12pt; FONT-FAMILY:宋体,serif;} </STYLE>
<META name=GENERATOR content="MSHTML 8.00.7600.16385"><BASE
target=_blank></HEAD>
<BODY
style="LINE-HEIGHT: 1.3; BORDER-RIGHT-WIDTH: 0px; MARGIN: 12px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
marginwidth="0" marginheight="0">
<DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=微软雅黑><FONT
color=#000000 size=3 face=宋体>Oh, sorry, I misunderstood your
idea,</FONT></FONT></FONT></FONT></DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=宋体>Ok, then the last problem is
how to release the vcpus/mem resources of suspended instances on the
compute nodes?</FONT></DIV>
<DIV><FONT face=微软雅黑></FONT> </DIV></FONT></FONT>
<DIV><FONT face=微软雅黑>2014-06-26 11:57 (UTC+8)</FONT></DIV>
<DIV><FONT face=微软雅黑>Wangpan</FONT></DIV>
<DIV><FONT size=2 face=微软雅黑></FONT> </DIV>
<DIV><FONT size=2 face=微软雅黑>----- Original Message -----</FONT></DIV>
<DIV><FONT size=2 face=微软雅黑>> From: Ricky Saltzer
<ricky@cloudera.com></FONT></DIV>
<DIV><FONT size=2 face=微软雅黑>> To:
"Wangpan"<hzwangpan@corp.netease.com><BR>>
Sent: 2014-06-25 03:58</FONT></DIV>
<DIV><FONT size=2 face=微软雅黑>> Subject: Re: Re: [Openstack] Why doesn't
suspend release vCPUs/memory?</FONT></DIV>
<DIV><FONT size=2 face=微软雅黑>
<TABLE width="100%">
<TBODY>
<TR>
<TD width="100%">
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<DIV dir=ltr>I don't see how there would be a problem if you still
enforced a hard limit of the number of instances a user can have. The
proposal here is suspending would release <I>only</I> vCPUs and memory,
so the user could still potentially exceed their quota by reaching their
allotted amount of instances. Let's say 5/10 instances for a user
accumulated to 20 vCPUs (4 vCPUs per node), suspending those 5 instances
would release the 20 vCPUs back, but those 5 suspended instances would
still count towards their total number of instances quota.
<BR><BR><BR></DIV>
<DIV class=gmail_extra><BR><BR>
<DIV class=gmail_quote>On Mon, Jun 23, 2014 at 11:24 PM, Wangpan <SPAN
dir=ltr><<A href="mailto:hzwangpan@corp.netease.com"
target=_blank>hzwangpan@corp.netease.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE
style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote><U></U>
<DIV
style="LINE-HEIGHT: 1.3; BORDER-RIGHT-WIDTH: 0px; MARGIN: 12px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
marginwidth="0" marginheight="0">
<DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=微软雅黑><FONT
color=#000000 size=3 face=宋体>I think if we do this, a serious security
risk is imported, think this use
case:</FONT></FONT></FONT></FONT></DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=宋体>1) an user has
quotas like 10 instances, 20 vcpus, 100G ram and 200G
disks</FONT></FONT></FONT></DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=宋体>2) he boots 10
instances under his quotas</FONT></FONT></FONT></DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=宋体>3) he suspends all
this instances</FONT></FONT></FONT></DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=宋体>4) he repeats step
2&3 day and night</FONT></FONT></FONT></DIV>
<DIV><FONT face=微软雅黑><FONT face=微软雅黑><FONT face=宋体>5) then the cloud
platform will have no resources to supply
eventually</FONT></FONT></FONT></DIV>
<DIV><FONT face=微软雅黑></FONT> </DIV>
<DIV><FONT face=微软雅黑><A href="tel:2014-06-24%C2%A011" target=_blank
value="+12014062411">2014-06-24 11</A>:17 (UTC+8)</FONT></DIV><SPAN
class=HOEnZb><FONT color=#888888>
<DIV><FONT face=微软雅黑>Wangpan</FONT></DIV></FONT></SPAN>
<DIV>
<DIV class=h5>
<DIV><FONT face=微软雅黑></FONT> </DIV>
<DIV><FONT face=微软雅黑>----- Original Message -----</FONT></DIV>
<DIV><FONT face=微软雅黑>> From: Ricky Saltzer <<A
href="mailto:ricky@cloudera.com"
target=_blank>ricky@cloudera.com</A>></FONT></DIV>
<DIV><FONT face=微软雅黑>> To: "John Griffith"<<A
href="mailto:john.griffith@solidfire.com"
target=_blank>john.griffith@solidfire.com</A>><BR>>
Sent: <A href="tel:2014-06-24%C2%A001" target=_blank
value="+12014062401">2014-06-24 01</A>:05</FONT></DIV>
<DIV><FONT face=微软雅黑>> Subject: Re: [Openstack] Why doesn't suspend
release vCPUs/memory?</FONT></DIV>
<DIV><FONT face=微软雅黑>
<TABLE width="100%">
<TBODY>
<TR>
<TD width="100%">
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<DIV dir=ltr>
<DIV>That seems to be the case, and I can see where you're
coming from, but if the resources aren't released at the quota
level, then they're effectively being used from a user's point
of view. It would be nice if <I>suspend</I> released resources
after the instance is shutdown, and a <I>resume</I> would
reclaim the resources (provided enough are available). For
instance, if I had 210/210 vCPUs used, and I suspend
<I>instance_a</I> with 1 vCPU, and then launch <I>instance_b
</I>with 1 vCPU...<I>instance_b </I>should successfully
deploy, but resuming <I>instance_a</I> should fail with a
quota exceeded exception.<BR><BR></DIV></DIV>
<DIV class=gmail_extra><BR><BR>
<DIV class=gmail_quote>On Mon, Jun 23, 2014 at 12:54 PM, John
Griffith <SPAN dir=ltr><<A
href="mailto:john.griffith@solidfire.com"
target=_blank>john.griffith@solidfire.com</A>></SPAN>
wrote:<BR>
<BLOCKQUOTE
style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote>
<DIV dir=ltr>
<DIV style="FONT-FAMILY: courier new,monospace"
class=gmail_default><BR></DIV>
<DIV class=gmail_extra>
<DIV>
<DIV><BR><BR>
<DIV class=gmail_quote>On Mon, Jun 23, 2014 at 10:49 AM,
Ricky Saltzer <SPAN dir=ltr><<A
href="mailto:ricky@cloudera.com"
target=_blank>ricky@cloudera.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE
style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote>
<DIV dir=ltr>Right, the quotas don't seem to be released.
If I have 210/210 vCPUs used, and I suspend an instance
with 4 vCPUs, I still have 210/210 vCPUs used. <BR></DIV>
<DIV class=gmail_extra>
<DIV>
<DIV><BR><BR>
<DIV class=gmail_quote>On Mon, Jun 23, 2014 at 11:38 AM,
John Griffith <SPAN dir=ltr><<A
href="mailto:john.griffith@solidfire.com"
target=_blank>john.griffith@solidfire.com</A>></SPAN>
wrote:<BR>
<BLOCKQUOTE
style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote>
<DIV dir=ltr>
<DIV class=gmail_extra><BR>
<DIV class=gmail_quote>On Mon, Jun 23, 2014 at 7:45 AM,
Ricky Saltzer <SPAN dir=ltr><<A
href="mailto:ricky@cloudera.com"
target=_blank>ricky@cloudera.com</A>></SPAN>
wrote:<BR>
<BLOCKQUOTE
style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote><A
href="https://ask.openstack.org/en/question/32826/why-doesnt-suspend-release-vcpusmemory/"
target=_blank>https://ask.openstack.org/en/question/32826/why-doesnt-suspend-release-vcpusmemory/</A></BLOCKQUOTE></DIV><BR>
<DIV style="FONT-FAMILY: 'courier new',monospace">My
understanding was always that the instance is no longer
consuming any resources via the virt layer, so in
essence the resources are in fact freed up on the
Compute Node. Quotas and such however aren't
modified (which seems correct to me). Are you
saying you want to see quota's adjusted here?
</DIV><BR></DIV></DIV></BLOCKQUOTE></DIV><BR><BR
clear=all><BR></DIV></DIV>
<DIV>-- <BR>
<DIV dir=ltr>
<DIV>Ricky Saltzer</DIV>
<DIV><A href="http://www.cloudera.com"
target=_blank>http://www.cloudera.com</A><BR></DIV>
<DIV><BR></DIV></DIV></DIV></DIV></BLOCKQUOTE></DIV></DIV></DIV>
<DIV style="FONT-FAMILY: 'courier new',monospace"
class=gmail_default>Yeah, I think that makes sense and is
expected, as a user you're still consuming those "items"
even if they're not active. The alternative would be
(which I think is what you're getting at) to actually deduct
items that are suspended from the tenants quota count.
I guess when I think of it though those resources are
still "reserved" even if they're not in use. I suppose
you could do this and then if on resume the quota isn't
there we don't actually resume... but I think this could be
argued either way.</DIV>
<DIV style="FONT-FAMILY: 'courier new',monospace"
class=gmail_default><BR></DIV>
<DIV style="FONT-FAMILY: 'courier new',monospace"
class=gmail_default>Maybe seperate quotas for active vs
suspended?
</DIV><BR></DIV></DIV></BLOCKQUOTE></DIV><BR><BR
clear=all><BR>-- <BR>
<DIV dir=ltr>
<DIV>Ricky Saltzer</DIV>
<DIV><A href="http://www.cloudera.com"
target=_blank>http://www.cloudera.com</A><BR></DIV>
<DIV><BR></DIV></DIV></DIV></BLOCKQUOTE></TD></TR></TBODY></TABLE></FONT><FONT
face="Times New Roman"></FONT></DIV></DIV></DIV></DIV></DIV></BLOCKQUOTE></DIV><BR><BR
clear=all><BR>-- <BR>
<DIV dir=ltr>
<DIV>Ricky Saltzer</DIV>
<DIV><A href="http://www.cloudera.com"
target=_blank>http://www.cloudera.com</A><BR></DIV>
<DIV><BR></DIV></DIV></DIV></BLOCKQUOTE></TD></TR></TBODY></TABLE></FONT><FONT
size=2 face="Times New Roman"></DIV></FONT></DIV></BODY></HTML>