performance of jailed processes
Pawel Jakub Dawidek
pjd at FreeBSD.org
Tue Mar 30 14:21:05 PST 2004
On Tue, Mar 30, 2004 at 11:17:39PM +0200, Dag-Erling Sm?rgrav wrote:
+> Robert Watson <rwatson at freebsd.org> writes:
+> > On Tue, 30 Mar 2004, Dag-Erling Sm?rgrav wrote:
+> > > although the query only returns one row, it's a pretty big row, so 13
+> > > seconds could be explained by per-syscall or per-packet overhead.
+> > Theory goes that there should be no per-read/write system call change in
+> > behavior for TCP with jail. Jail impacts bind/connect, and potentially
+> > each I/O on UDP for an unbound socket using sendto.
+>
+> root at outside /# /usr/bin/time -- sh -c 'echo "my sql query;" | mysql -command -line -arguments >/dev/null'
+> 0.06 real 0.00 user 0.03 sys
+> root at outside /# jexec 55 zsh
+> root at inside /# /usr/bin/time -- sh -c 'echo "my sql query;" | mysql -command -line -arguments >/dev/null'
+> 13.65 real 0.01 user 0.04 sys
+>
+> so it's definitely not CPU overhead - more likely a scheduling problem.
Could you try chroot to / ? By doing:
# jail / test <YOUR_IP> `which zsh`
# <your test>
?
--
Pawel Jakub Dawidek http://www.FreeBSD.org
pjd at FreeBSD.org http://garage.freebsd.pl
FreeBSD committer Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20040331/7e49fd69/attachment.bin
More information about the freebsd-current
mailing list