On Tue, 6 Apr 2010 14:26:29 +0800 "Xin, Xiaohui" <xiaohui.xin@xxxxxxxxx> wrote: > >How do you deal with the DoS problem of hostile user space app posting huge > >number of receives and never getting anything. > > That's a problem we are trying to deal with. It's critical for long term. > Currently, we tried to limit the pages it can pin, but not sure how much is reasonable. > For now, the buffers submitted is from guest virtio-net driver, so it's safe in some extent > just for now. It is critical even now. Once you get past toy benchmarks you will see things like Java processes with 1000 threads all reading at once. -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
