Re: performance of jailed processes

From: Pawel Jakub Dawidek <pjd_at_FreeBSD.org>
Date: Wed, 31 Mar 2004 00:21:02 +0200
On Tue, Mar 30, 2004 at 11:17:39PM +0200, Dag-Erling Sm?rgrav wrote:
+> Robert Watson <rwatson_at_freebsd.org> writes:
+> > On Tue, 30 Mar 2004, Dag-Erling Sm?rgrav wrote:
+> > > although the query only returns one row, it's a pretty big row, so 13
+> > > seconds could be explained by per-syscall or per-packet overhead.
+> > Theory goes that there should be no per-read/write system call change in
+> > behavior for TCP with jail.  Jail impacts bind/connect, and potentially
+> > each I/O on UDP for an unbound socket using sendto.
+> 
+> root_at_outside /# /usr/bin/time -- sh -c 'echo "my sql query;" | mysql -command -line -arguments >/dev/null'
+>         0.06 real         0.00 user         0.03 sys
+> root_at_outside /# jexec 55 zsh
+> root_at_inside /# /usr/bin/time -- sh -c 'echo "my sql query;" | mysql -command -line -arguments >/dev/null'
+>        13.65 real         0.01 user         0.04 sys
+> 
+> so it's definitely not CPU overhead - more likely a scheduling problem.

Could you try chroot to / ? By doing:

	# jail / test <YOUR_IP> `which zsh`
	# <your test>

?

-- 
Pawel Jakub Dawidek                       http://www.FreeBSD.org
pjd_at_FreeBSD.org                           http://garage.freebsd.pl
FreeBSD committer                         Am I Evil? Yes, I Am!

Received on Tue Mar 30 2004 - 12:21:05 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:49 UTC