Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Mar 2004 21:56:20 +0200
From:      Pawel Jakub Dawidek <pjd@FreeBSD.org>
To:        Dag-Erling Sm?rgrav <des@des.no>
Cc:        current@freebsd.org
Subject:   Re: performance of jailed processes
Message-ID:  <20040330195620.GH8930@darkness.comp.waw.pl>
In-Reply-To: <xzpbrmenocw.fsf@dwp.des.no>
References:  <Pine.NEB.3.96L.1040330133811.93169H-100000@fledge.watson.org> <xzpbrmenocw.fsf@dwp.des.no>

next in thread | previous in thread | raw e-mail | index | archive | help

--znFrcFTOc9PDN8kJ
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Mar 30, 2004 at 09:09:35PM +0200, Dag-Erling Sm?rgrav wrote:
+> > Can you identify any micro-benchmarks rather than macro-benchmarks that
+> > reflect a significant difference?
+>=20
+> haven't had much luck with that...  fetch, for instance, doesn't seem
+> to suffer, but with mysql the difference is dramatic:
+>=20
+> (outside jail)
+> 1 row in set (0.01 sec)
+>=20
+> (inside jail)
+> 1 row in set (13.20 sec)
+>=20
+> note that 13 seconds is far too short for a DNS issue, and that the
+> time reported is measured *after* login (i.e. after any DNS lookup)

I'm wondering if this piece of code is responsible for this delay:
(sys/netinet/in_pcb.c:551)

	if (laddr.s_addr =3D=3D INADDR_ANY && jailed(socred)) {
		bzero(&sa, sizeof(sa));
		sa.sin_addr.s_addr =3D htonl(prison_getip(socred));
		sa.sin_len =3D sizeof(sa);
		sa.sin_family =3D AF_INET;
		error =3D in_pcbbind_setup(inp, (struct sockaddr *)&sa,
		    &laddr.s_addr, &lport, cred);
		if (error)
			return (error);
	}

Maybe you can test it by putting a printf() after this if() and check
if it is printed with fetch and with mysql.

--=20
Pawel Jakub Dawidek                       http://www.FreeBSD.org
pjd@FreeBSD.org                           http://garage.freebsd.pl
FreeBSD committer                         Am I Evil? Yes, I Am!

--znFrcFTOc9PDN8kJ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAadDkForvXbEpPzQRAocwAJ9CRyst2AoSwS+BznjRo4tG6l6uYQCcCZNq
7yQ1/Djqc79vmixvVZJrbIw=
=oZyv
-----END PGP SIGNATURE-----

--znFrcFTOc9PDN8kJ--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040330195620.GH8930>