Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1456821

Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue

From Daniel Borkmann <daniel@iogearbox.net>
Newsgroups linux.kernel
Subject Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue
Date 2016-08-05 02:20 +0200
Message-ID <s2B1L-dd-3@gated-at.bofh.it> (permalink)
References <s2wEN-5rB-7@gated-at.bofh.it> <s2wOu-5y4-3@gated-at.bofh.it> <s2xrb-62U-5@gated-at.bofh.it> <s2zsZ-7Bf-17@gated-at.bofh.it> <s2zMl-7HL-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 08/05/2016 12:54 AM, Andi Kleen wrote:
>> +1, I tried to bring this up here [1] in the last spin. I think only very
>> few changes would be needed, f.e. on eBPF side to add a queue setting
>> helper function which is probably straight forward ~10loc patch; and with
>> regards to actually picking it up after clsact egress, we'd need to adapt
>> __netdev_pick_tx() slightly when CONFIG_XPS so it doesn't override it.
>
> You're proposing to rewrite the whole net policy manager as EBPF and run
> it in a crappy JITer? Is that a serious proposal? It just sounds crazy
> to me.
>
> Especially since we already have a perfectly good compiler and
> programming language to write system code in.
>
> EBPF is ok for temporal instrumentation (if you somehow can accept
> its security challenges), but using it to replace core
> kernel functionality (which network policy IMHO is) with some bizarre
> JITed setup and multiple languages doesn't really make any sense.
>
> Especially it doesn't make sense for anything with shared state,
> which is the core part of network policy: it negotiates with multiple
> users.
>
> After all we're writing Linux here and not some research toy.

 From what I read I guess you didn't really bother to look any deeper into
this bizarre "research toy" to double check some of your claims. One of the
things it's often deployed for by the way is defining policy. And the
suggestion here was merely to explore existing infrastructure around things
like tc and whether it already resolves at least a part of your net policy
manager's requirements (like queue selection) or whether existing infrastructure
can be extended with fewer complexity this way (as was mentioned with a new
cls module as one option).

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue kan.liang@intel.com - 2016-08-04 21:50 +0200
  Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce  netpolicy_pick_queue John Fastabend <john.fastabend@gmail.com> - 2016-08-04 22:30 +0200
    Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue Daniel Borkmann <daniel@iogearbox.net> - 2016-08-05 00:40 +0200
      Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce  netpolicy_pick_queue Andi Kleen <andi@firstfloor.org> - 2016-08-05 01:00 +0200
        Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue Daniel Borkmann <daniel@iogearbox.net> - 2016-08-05 02:20 +0200
          Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue Tom Herbert <tom@herbertland.com> - 2016-08-05 16:50 +0200
  Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue Tom Herbert <tom@herbertland.com> - 2016-08-05 06:00 +0200
    RE: [RFC V2 PATCH 17/25] net/netpolicy: introduce  netpolicy_pick_queue "Liang, Kan" <kan.liang@intel.com> - 2016-08-05 16:00 +0200
      Re: [RFC V2 PATCH 17/25] net/netpolicy: introduce netpolicy_pick_queue Tom Herbert <tom@herbertland.com> - 2016-08-05 16:40 +0200

csiph-web