Hi

on 2019/9/2 16:54, 崔恒香 wrote: The port_security function is disabled.But in the S version environment, adding a lot of flows on br-int. Does this slow down the creation of VM?

why adding flows on S but not equivalent on O?

True,if you want to compared the performance of the Stein and Ocata, you should keep their configuration as the same, otherwise it's not representative.

sure too many flows take performance down.

@崔恒香 I think you can set the configuration item " vif_plugging_is_fatal=False" [1] in the nova-compute.conf, and then compare the performance of Ocata and Stein version by creating the same quantity servers. And you can combine with the configuration item " vif_plugging_timeout" to use. This way, you can verify if you are creating servers slow because of network. [1] https://docs.openstack.org/nova/stein/configuration/config.html#DEFAULT.vif_... [2] https://docs.openstack.org/nova/stein/configuration/config.html#DEFAULT.vif_...

regards.

Brin Zhang