Re: [Cake] triple flow isolation

2016-01-18 Thread Sebastian Moeller
Hi Jonathan, On January 18, 2016 10:37:35 AM GMT+01:00, Jonathan Morton wrote: > >> On 18 Jan, 2016, at 11:21, moeller0 wrote: >> >> Am I right to assume that dust and src host isolation works with the >same counters but simply ignores one of them? > >Yes. That’s explicit in the code.

Re: [Cake] triple flow isolation

2016-01-18 Thread Jonathan Morton
>> Hence I think it’s reasonable to simply switch on triple isolation by >> default, in the near future. It does approximately the right thing, without >> further configuration, in the great majority of practical cases (that I can >> think of), and to a greater extent than the existing “flows” mod

Re: [Cake] triple flow isolation

2016-01-18 Thread Alan Jenkins
On 18/01/2016, Jonathan Morton wrote: > Hence I think it’s reasonable to simply switch on triple isolation by > default, in the near future. It does approximately the right thing, without > further configuration, in the great majority of practical cases (that I can > think of), and to a greater

Re: [Cake] triple flow isolation

2016-01-18 Thread Jonathan Morton
> On 18 Jan, 2016, at 11:21, moeller0 wrote: > > Am I right to assume that dust and src host isolation works with the same > counters but simply ignores one of them? Yes. That’s explicit in the code. > So if all internal hosts talk to one external host, does this scheme then > equal pure pe

Re: [Cake] triple flow isolation

2016-01-18 Thread moeller0
Hi Jonathan, > On Jan 16, 2016, at 10:05 , Jonathan Morton wrote: > > I’ve just committed and pushed the fixes required for triple-isolation to > actually work. They are small. My tests now pass. This is a good feeling. > >> On 15 Jan, 2016, at 10:05, moeller0 wrote: >> I do not cla

Re: [Cake] triple flow isolation

2016-01-18 Thread moeller0
Hi Jonathan, > On Jan 16, 2016, at 10:35 , Jonathan Morton wrote: > > >> On 16 Jan, 2016, at 11:05, Jonathan Morton wrote: >> >> The opposite sense would be to have the side with the smaller number of >> hosts govern the system. This would, I think, handle both the swarm and >> shard cases

Re: [Cake] triple flow isolation

2016-01-16 Thread Jonathan Morton
> On 16 Jan, 2016, at 11:05, Jonathan Morton wrote: > > The opposite sense would be to have the side with the smaller number of hosts > govern the system. This would, I think, handle both the swarm and shard > cases better than the above, so I’ll see if I can think of a way to adapt the > al

Re: [Cake] triple flow isolation

2016-01-16 Thread Jonathan Morton
I’ve just committed and pushed the fixes required for triple-isolation to actually work. They are small. My tests now pass. This is a good feeling. > On 15 Jan, 2016, at 10:05, moeller0 wrote: > >>> I do not claim I understand what triple-iso intends to accomplish in detail. >> >> The short

Re: [Cake] triple flow isolation

2016-01-15 Thread moeller0
Hi Jonathan, > On Jan 15, 2016, at 01:05 , Jonathan Morton wrote: > > >> On 14 Jan, 2016, at 20:53, moeller0 wrote: >> >> So I have not grokked the triple algorithm fully (aka not at all), but I >> already know that what user’s are looking for is fairness by internal host >> IPs. Now, sinc

Re: [Cake] triple flow isolation

2016-01-14 Thread Jonathan Morton
> On 14 Jan, 2016, at 20:53, moeller0 wrote: > > So I have not grokked the triple algorithm fully (aka not at all), but I > already know that what user’s are looking for is fairness by internal host > IPs. Now, since as I explained before ingress and egress really are too > flexible to use as

Re: [Cake] triple flow isolation

2016-01-14 Thread Jonathan Morton
> On 14 Jan, 2016, at 17:48, moeller0 wrote: > > I am still curious about the non-NAT fairness by internal IP addresses only > performance, as far as I understand that is the main request/use case people > seem to have. Non-NAT should work fine, once I’ve fixed the algorithm. That’s a major

Re: [Cake] triple flow isolation

2016-01-14 Thread moeller0
HI Jonathan, > On Jan 14, 2016, at 15:45 , Jonathan Morton wrote: > > >> On 14 Jan, 2016, at 16:20, moeller0 wrote: >> >> I am really curious how cake behaves in that setting... > > I have identified a limitation in the current triple-isolation implementation > - in fact it only works prope

Re: [Cake] triple flow isolation

2016-01-14 Thread Jonathan Morton
> On 14 Jan, 2016, at 16:20, moeller0 wrote: > > I am really curious how cake behaves in that setting... I have identified a limitation in the current triple-isolation implementation - in fact it only works properly if the sources *and* destinations of the flows are independent. I’m working

Re: [Cake] triple flow isolation

2016-01-14 Thread moeller0
Hi Kevin, > On Jan 11, 2016, at 21:33 , Kevin Darbyshire-Bryant > wrote: > > > > On 11/01/16 18:16, moeller0 wrote: >> Hi Kevin, >> >> I agree the triple mode seems under-documented ;) > Yes that's true but it is experimental after all - and I'm experimenting > with it :-) >>> On Jan 11, 201

Re: [Cake] triple flow isolation

2016-01-11 Thread Kevin Darbyshire-Bryant
On 11/01/16 18:16, moeller0 wrote: > Hi Kevin, > > I agree the triple mode seems under-documented ;) Yes that's true but it is experimental after all - and I'm experimenting with it :-) >> On Jan 11, 2016, at 18:40 , Kevin Darbyshire-Bryant >> wrote: >> >> Hello List, >> >> I've been looking at

Re: [Cake] triple flow isolation

2016-01-11 Thread moeller0
Hi Kevin, I agree the triple mode seems under-documented ;) > On Jan 11, 2016, at 18:40 , Kevin Darbyshire-Bryant > wrote: > > Hello List, > > I've been looking at latest 'triple flow isolation' features in latest > cake git and find myself confused. It's very likely to be a > misunderstandi

[Cake] triple flow isolation

2016-01-11 Thread Kevin Darbyshire-Bryant
Hello List, I've been looking at latest 'triple flow isolation' features in latest cake git and find myself confused. It's very likely to be a misunderstanding on my part, although if I'm confused I'm sure others will, sooner or later, fall into the same trap. I thought that triple flow was a so