From patchwork Fri Oct 13 08:25:17 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Fischetti, Antonio" X-Patchwork-Id: 825286 X-Patchwork-Delegate: dlu998@gmail.com Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (mailfrom) smtp.mailfrom=openvswitch.org (client-ip=140.211.169.12; helo=mail.linuxfoundation.org; envelope-from=ovs-dev-bounces@openvswitch.org; receiver=) Received: from mail.linuxfoundation.org (mail.linuxfoundation.org [140.211.169.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 3yD1822Kjpz9s82 for ; Fri, 13 Oct 2017 19:28:34 +1100 (AEDT) Received: from mail.linux-foundation.org (localhost [127.0.0.1]) by mail.linuxfoundation.org (Postfix) with ESMTP id 80385A7F; Fri, 13 Oct 2017 08:25:29 +0000 (UTC) X-Original-To: dev@openvswitch.org Delivered-To: ovs-dev@mail.linuxfoundation.org Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTPS id 50CBEAA5 for ; Fri, 13 Oct 2017 08:25:28 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id ED962483 for ; Fri, 13 Oct 2017 08:25:27 +0000 (UTC) Received: from orsmga002.jf.intel.com ([10.7.209.21]) by fmsmga104.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 13 Oct 2017 01:25:27 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.43,370,1503385200"; d="scan'208";a="146040837" Received: from sivswdev01.ir.intel.com (HELO localhost.localdomain) ([10.237.217.45]) by orsmga002.jf.intel.com with ESMTP; 13 Oct 2017 01:25:26 -0700 From: antonio.fischetti@intel.com To: dev@openvswitch.org Date: Fri, 13 Oct 2017 09:25:17 +0100 Message-Id: <1507883117-24347-6-git-send-email-antonio.fischetti@intel.com> X-Mailer: git-send-email 1.7.0.7 In-Reply-To: <1507883117-24347-1-git-send-email-antonio.fischetti@intel.com> References: <1507883117-24347-1-git-send-email-antonio.fischetti@intel.com> X-Spam-Status: No, score=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED, RP_MATCHES_RCVD autolearn=disabled version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on smtp1.linux-foundation.org Subject: [ovs-dev] [PATCH v3 5/5] doc: ConnTracker cfg parameters. X-BeenThere: ovs-dev@openvswitch.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: ovs-dev-bounces@openvswitch.org Errors-To: ovs-dev-bounces@openvswitch.org Update documentation with the new commands to Read/Write ConnTracker configuration parameters. CC: Kevin Traynor CC: Darrell Ball Signed-off-by: Antonio Fischetti Acked-by: Stephen Finucane --- Documentation/intro/install/dpdk.rst | 25 +++++++++++++++++++++++++ lib/dpctl.man | 10 ++++++++++ 2 files changed, 35 insertions(+) diff --git a/Documentation/intro/install/dpdk.rst b/Documentation/intro/install/dpdk.rst index bb69ae5..a1f259c 100644 --- a/Documentation/intro/install/dpdk.rst +++ b/Documentation/intro/install/dpdk.rst @@ -568,6 +568,31 @@ not needed i.e. jumbo frames are not needed, it can be forced off by adding chains of descriptors it will make more individual virtio descriptors available for rx to the guest using dpdkvhost ports and this can improve performance. +Connection Tracker +~~~~~~~~~~~~~~~~~~ + +When the Connection Tracker is enabled the overall performance can be deeply +affected, even with simple firewall rules and with stateless protocols like +UDP. In order to find a better tuning, commands like + +:: + + $ ovs-appctl dpctl/ct-get-glbl-cfg + $ ovs-appctl dpctl/ct-set-glbl-cfg = + +allow respectively to read the current value, or set a new value to a +configuration parameter. +For example, to reduce the impact of the Connection Tracker load on the +system performance, the maximum number of tracked connections can be +reduced. + +The available configuration parameters are: + +- maxconn: Maximum number of connections managed by the Connection Tracker + module. It's both readable and writeable. +- totconn: Total number of connections currently managed by the Connection + Tracker module. Readable only. + Limitations ------------ diff --git a/lib/dpctl.man b/lib/dpctl.man index 675fe5a..64ad105 100644 --- a/lib/dpctl.man +++ b/lib/dpctl.man @@ -235,3 +235,13 @@ For each ConnTracker bucket, displays the number of connections used by \fIdp\fR. If \fBgt=\fIThreshold\fR is specified, bucket numbers are displayed when the number of connections in a bucket is greater than \fIThreshold\fR. +. +.TP +\*(DX\fBct\-get\-glbl\-cfg\fR [\fIdp\fR] \fBparam\fR +Read the current value of the specified ConnTracker parameter used +by \fIdp\fR. +. +.TP +\*(DX\fBct\-set\-glbl\-cfg\fR [\fIdp\fR] \fBparam=\fI..\fR +Set a value to the specified ConnTracker parameter used +by \fIdp\fR.