[Openstack-operators] OpenvSwitch Latency issues

Jacob Godin jacobgodin at gmail.com
Fri Nov 8 12:20:52 UTC 2013


Is there plans to put 1.11 into the Ubuntu Cloud Archive for Havana?


On Sat, Oct 26, 2013 at 10:29 AM, George Shuklin
<george.shuklin at gmail.com>wrote:

>  Multithreading is not an issue.
>
> Main feature in ovs 1.11 which make it 'wild internet ready' is
> 'megaflow'.
>
> Problem is that in old mode kernel module send every new flow header to
> inspection to userspace daemon. And daemon send rule to kernel (ovs-dpctl
> dump-flows). Prior 1.11 that rule (internal rule, not 'openflow') could not
> contain masks. So in --flood mode it simply cause every new packet going to
> slow path overloading daemon.
>
> In OVS 1.11 now internal rules can contain masks (megaflow it is) and now
> different port numbers, source/dest IPs is no longer an issue.
>
>
>
> On 26.10.2013 12:45, Édouard Thuleau wrote:
>
> We made some tests to know the limit of simultaneous established
> connections a VM can support and we met some pb with 1.11 release
> (crashes...).
>
> So we try the new release 2.0.0 [1] (on the advice of KVM list [2] ) which
> had the support for the multiple threads for ovs-vswitchd process. And now,
> we no longer have limitations from OVS.
>
>  Ubuntu ppa packages OVS 1.11.0 and 2.0.0 are available here [3] thanks
> to Sahid.
>
>  [1]
> http://git.openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob;f=NEWS;h=e0fafd08f52cc3a753cef6554251b9288cd3e6e3;hb=refs/heads/branch-2.0
> [2] http://www.mail-archive.com/kvm@vger.kernel.org/msg96823.html
> [3] https://launchpad.net/~sahid-ferdjaoui/+archive/openvswitch<https://launchpad.net/%7Esahid-ferdjaoui/+archive/openvswitch>
>
>  Regards,
> Édouard.
>
>
>
> On Sat, Oct 26, 2013 at 2:26 AM, George Shuklin <george.shuklin at gmail.com>wrote:
>
>> I my tests any ovs below 1.11 suck hardly. You can see it by simple
>> hping3 --flood vm.ip
>>
>> All older ovs simply can't keep pace over 10-15mb/sec. Ovs 1.11easely
>> operates at 8-10 gb/s.
>>
>> I don't know about is stability, but putting anything except it with
>> naked butt toward hostile internet is really not wize. It's like invitation
>> for script kiddie: DoS me please from your cellular internet.
>>
>> _______________________________________________
>> OpenStack-operators mailing list
>> OpenStack-operators at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>
>>
>
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20131108/ff76aa33/attachment.html>


More information about the OpenStack-operators mailing list