From owner-freebsd-current@FreeBSD.ORG  Tue Mar 30 16:40:53 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3B36E16A4CE; Tue, 30 Mar 2004 16:40:53 -0800 (PST)
Received: from fledge.watson.org (fledge.watson.org [204.156.12.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id D5CBA43D45; Tue, 30 Mar 2004 16:40:52 -0800 (PST)
	(envelope-from robert@fledge.watson.org)
Received: from fledge.watson.org (localhost [127.0.0.1])
	by fledge.watson.org (8.12.10/8.12.10) with ESMTP id i2V0cPxC002582;
	Tue, 30 Mar 2004 19:38:25 -0500 (EST)
	(envelope-from robert@fledge.watson.org)
Received: from localhost (robert@localhost)i2V0cPvj002579;
	Tue, 30 Mar 2004 19:38:25 -0500 (EST)
	(envelope-from robert@fledge.watson.org)
Date: Tue, 30 Mar 2004 19:38:25 -0500 (EST)
From: Robert Watson <rwatson@FreeBSD.org>
X-Sender: robert@fledge.watson.org
To: Dag-Erling =?iso-8859-1?q?Sm=F8rgrav?= <des@des.no>
In-Reply-To: <xzpr7v9q4kx.fsf@dwp.des.no>
Message-ID: <Pine.NEB.3.96L.1040330193604.1917D-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: QUOTED-PRINTABLE
cc: Pawel Jakub Dawidek <pjd@FreeBSD.org>
cc: current@FreeBSD.org
Subject: Re: performance of jailed processes
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Mar 2004 00:40:53 -0000


On Wed, 31 Mar 2004, Dag-Erling Sm=F8rgrav wrote:

> Robert Watson <rwatson@FreeBSD.org> writes:
> > If you plug 'YOUR_IP' with variations, does it change things?
>=20
> Aha!  using the primary IP address works fine, but using one of the jail
> IPs does not.
>=20
> (before anyone asks, I've already spent an entire day verifying that
> this is not a firewall issue)=20

I'd be very interested in knowing if changing your application to bind
alternative IP addresses rather than using jail to force the binding to an
alternative address changes the performance results.  I.e., are we looking
at a problem with additional aliases and not a problem with jail at all...=
=20

Another thing I'd be interested to know is: if you instrument the
application to get the socket buffer size using getsockopt() and
SO_{RCV,SND}BUF in the in-jail and out-of-jail cases.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Senior Research Scientist, McAfee Research