[ovs-discuss] Flood test with xen/openvswitch
jesse at nicira.com
Wed Sep 7 22:40:52 UTC 2011
2011/9/7 Sébastien Riccio <sr at swisscenter.com>:
> On 07.09.2011 17:12, Ben Pfaff wrote:
>> On Wed, Sep 07, 2011 at 01:28:16PM +0200, S?bastien Riccio wrote:
>>> I just did a test to see how openvswitch handle a flood from a
>>> virtual machine on a xen
>>> host using it as the networking layer.
>>> I just issued a :
>>> vm1# hping3 -S -L 0 -p 80 -i u100 192.168.1.1
>>> options I used are:
>>> -S set SYN tcp flag
>>> -L set ACK tcp flag
>>> -p destination port
>>> -i u100 = interval between packets in micro seconds
>>> This results in a cpu usage up to 97% by the ovs-vswitchd process in
>>> the dom0.
>>> Letting it go for a few minutes turns the whole xen host
>>> unresponsive to network access
>>> and must then be accessed from the local console.
I have some patches that I'm working on to prevent a single guest from
being able to monopolize network resources like this but they're not
quite done yet. The actual CPU consumption will remain but that's
more of an accounting issue with Xen.
More information about the discuss