performance of jailed processes

[Robert Watson]

On Wed, 31 Mar 2004, Dag-Erling Smørgrav wrote:

> Robert Watson <rwatson at FreeBSD.org> writes:
> > If you plug 'YOUR_IP' with variations, does it change things?
> 
> Aha!  using the primary IP address works fine, but using one of the jail
> IPs does not.
> 
> (before anyone asks, I've already spent an entire day verifying that
> this is not a firewall issue) 

I'd be very interested in knowing if changing your application to bind
alternative IP addresses rather than using jail to force the binding to an
alternative address changes the performance results.  I.e., are we looking
at a problem with additional aliases and not a problem with jail at all... 

Another thing I'd be interested to know is: if you instrument the
application to get the socket buffer size using getsockopt() and
SO_{RCV,SND}BUF in the in-jail and out-of-jail cases.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert at fledge.watson.org      Senior Research Scientist, McAfee Research