From owner-freebsd-current@FreeBSD.ORG Tue Mar 30 13:02:30 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 93E2716A4CE for ; Tue, 30 Mar 2004 13:02:30 -0800 (PST) Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3D46443D41 for ; Tue, 30 Mar 2004 13:02:30 -0800 (PST) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (localhost [127.0.0.1]) by fledge.watson.org (8.12.10/8.12.10) with ESMTP id i2UL03xC099534; Tue, 30 Mar 2004 16:00:03 -0500 (EST) (envelope-from robert@fledge.watson.org) Received: from localhost (robert@localhost)i2UL03EV099531; Tue, 30 Mar 2004 16:00:03 -0500 (EST) (envelope-from robert@fledge.watson.org) Date: Tue, 30 Mar 2004 16:00:03 -0500 (EST) From: Robert Watson X-Sender: robert@fledge.watson.org To: Dag-Erling =?iso-8859-1?q?Sm=F8rgrav?= In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=ISO-8859-1 Content-Transfer-Encoding: QUOTED-PRINTABLE cc: current@freebsd.org Subject: Re: performance of jailed processes X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Mar 2004 21:02:30 -0000 On Tue, 30 Mar 2004, Dag-Erling Sm=F8rgrav wrote: > Robert Watson writes: > > Somewhat more painful suggestion, but could you generate ktraces agains= t a > > mysql client doing the query inside and out of jail, then using whateve= r > > flag sets relative timestamps on kdump, diff the two and see where the > > substantial differences begin? >=20 > I'll give it a shot tomorrow. I've had quite a bit of luck resolving mysql problems in jail using this approach, fwiw, during some confusion relating to UNIX domain sockets at an ISP I provide some help to. > > 13 seconds is too long for most of the potential things I have in mind.= =2E. >=20 > although the query only returns one row, it's a pretty big row, so 13 > seconds could be explained by per-syscall or per-packet overhead.=20 Theory goes that there should be no per-read/write system call change in behavior for TCP with jail. Jail impacts bind/connect, and potentially each I/O on UDP for an unbound socket using sendto.=20 Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Senior Research Scientist, McAfee Research