Denys Fedoryshchenko a écrit :
Yes, it seems related to routing. Before such thing was not happening (maybe
because TRIE was operating better?).
Here is info at "peak time", i disable nmi_watchdog now, so garbage collector
will not be triggered by nmi watchdog.
rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|
rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|rt_cache|
rt_cache|
entries| in_hit|in_slow_|in_slow_|in_no_ro| in_brd|in_marti|in_marti|
out_hit|out_slow|out_slow|gc_total|gc_ignor|gc_goal_|gc_dst_o|in_hlist|
out_hlis|
| | tot| mc| ute| | an_dst|
an_src| | _tot| _mc| | ed| miss| verflow|
_search|t_search|
247011| 2255410| 162866| 0| 610| 5| 0| 0|
33761| 8574| 0| 165475| 165307| 0| 0|10407428| 174948|
251810| 43087| 2782| 0| 9| 0| 0| 0|
618| 122| 0| 2912| 2909| 0| 0| 241946| 3796|
256277| 43035| 2739| 0| 9| 0| 0| 0|
595| 121| 0| 2867| 2864| 0| 0| 243724| 3748|
260177| 43596| 2647| 0| 8| 0| 0| 0|
672| 123| 0| 2778| 2776| 0| 0| 246880| 4048|
232741| 42270| 2759| 0| 15| 0| 0| 0|
665| 135| 0| 2910| 2907| 0| 0| 233990| 3938|
226623| 42615| 2792| 0| 11| 0| 0| 0|
723| 132| 0| 2935| 2932| 0| 0| 218378| 3862|
233190| 42397| 2778| 0| 8| 0| 0| 0|
675| 128| 0| 2913| 2909| 0| 0| 214258| 3703|
239093| 42342| 2713| 0| 9| 0| 0| 0|
764| 126| 0| 2847| 2845| 0| 0| 216453| 4080|
150539| 36992| 7564| 0| 58| 0| 0| 0|
539| 283| 0| 7902| 7900| 0| 0| 93459| 1996|
154441| 40258| 4422| 0| 12| 0| 0| 0|
655| 212| 0| 4644| 4640| 0| 0| 77271| 1458|
On one "crash" i got
Mar 27 11:27:15 205.177.186.74 [ 7141.156100] dst cache overflow
Mar 27 11:27:15 205.177.186.74 [ 7141.002291] dst cache overflow
Mar 27 11:27:15 205.177.186.74 [ 7141.162756] dst cache overflow
So i increase now routes amount more than 512K to 5120K, and will see more.
You want to tune route cache for your special needs, and not permit it
to store 5 millions entries !
# default is a gc every 60 seconds, not good for large caches
echo 1 >/proc/sys/net/ipv4/route/gc_interval
# default is 8 entries per slot..
echo 4 >/proc/sys/net/ipv4/route/gc_elasticity
# avoid a flush every 10 minutes
echo 3600 >/proc/sys/net/ipv4/route/secret_interval
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
