Re: [openstack-dev] [neutron] Neutron router and nf_conntrack performance problems

2014-08-18 Thread Brian Haley
Stuart, I also can't say I've seen this, but I am curious now. I did have a few questions for you though. 1. When you say you set nf_conntrack_max/nf_conntrack_hash to 256k, did you really set the hash size that large? Typically the hash is 1/8 of the max, meaning you'd have 8 entries per

[openstack-dev] [neutron] Neutron router and nf_conntrack performance problems

2014-08-16 Thread Stuart Fox
Hey neutron dev! Im having a serious problem with my neutron router getting spin locked in nf_conntrack_tuple_taken. Has anybody else experienced it? perf top shows nf_conntrack_tuple_taken at 75% As the incoming request rate goes up, so nf_conntrack_tuple_taken runs very hot on CPU0 causing

Re: [openstack-dev] [neutron] Neutron router and nf_conntrack performance problems

2014-08-16 Thread Salvatore Orlando
Hi Stuart, As far as I can tell, this is the first time I hear about this problem. I can't make any judgment with the details you've shared here, but I would initially focus on ovs, the kernel and their interactions. For Neutron's l3 agent the only thing I can say is that it uses the conntrack