[ovs-dev] [PATCH v3 5/5] doc: ConnTracker cfg parameters.

antonio.fischetti at intel.com antonio.fischetti at intel.com
Fri Oct 13 08:25:17 UTC 2017

Update documentation with the new commands to Read/Write
ConnTracker configuration parameters.

CC: Kevin Traynor <ktraynor at redhat.com>
CC: Darrell Ball <dlu998 at gmail.com>
Signed-off-by: Antonio Fischetti <antonio.fischetti at intel.com>
 Documentation/intro/install/dpdk.rst | 25 +++++++++++++++++++++++++
 lib/dpctl.man                        | 10 ++++++++++
 2 files changed, 35 insertions(+)

diff --git a/Documentation/intro/install/dpdk.rst b/Documentation/intro/install/dpdk.rst
index bb69ae5..a1f259c 100644
--- a/Documentation/intro/install/dpdk.rst
+++ b/Documentation/intro/install/dpdk.rst
@@ -568,6 +568,31 @@ not needed i.e. jumbo frames are not needed, it can be forced off by adding
 chains of descriptors it will make more individual virtio descriptors available
 for rx to the guest using dpdkvhost ports and this can improve performance.
+Connection Tracker
+When the Connection Tracker is enabled the overall performance can be deeply
+affected, even with simple firewall rules and with stateless protocols like
+UDP.  In order to find a better tuning, commands like
+    $ ovs-appctl dpctl/ct-get-glbl-cfg <cfg param>
+    $ ovs-appctl dpctl/ct-set-glbl-cfg <cfg param>=<value>
+allow respectively to read the current value, or set a new value to a
+configuration parameter.
+For example, to reduce the impact of the Connection Tracker load on the
+system performance, the maximum number of tracked connections can be
+The available configuration parameters are:
+- maxconn: Maximum number of connections managed by the Connection Tracker
+  module. It's both readable and writeable.
+- totconn: Total number of connections currently managed by the Connection
+  Tracker module. Readable only.
diff --git a/lib/dpctl.man b/lib/dpctl.man
index 675fe5a..64ad105 100644
--- a/lib/dpctl.man
+++ b/lib/dpctl.man
@@ -235,3 +235,13 @@ For each ConnTracker bucket, displays the number of connections used
 by \fIdp\fR.
 If \fBgt=\fIThreshold\fR is specified, bucket numbers are displayed when
 the number of connections in a bucket is greater than \fIThreshold\fR.
+\*(DX\fBct\-get\-glbl\-cfg\fR [\fIdp\fR] \fBparam\fR
+Read the current value of the specified ConnTracker parameter used
+by \fIdp\fR.
+\*(DX\fBct\-set\-glbl\-cfg\fR [\fIdp\fR] \fBparam=\fI..\fR
+Set a value to the specified ConnTracker parameter used
+by \fIdp\fR.

More information about the dev mailing list