Commit 018d26fc authored by Dmitry Yakunin's avatar Dmitry Yakunin Committed by David S. Miller
Browse files

cgroup, netclassid: periodically release file_lock on classid updating 



In our production environment we have faced with problem that updating
classid in cgroup with heavy tasks cause long freeze of the file tables
in this tasks. By heavy tasks we understand tasks with many threads and
opened sockets (e.g. balancers). This freeze leads to an increase number
of client timeouts.

This patch implements following logic to fix this issue:
аfter iterating 1000 file descriptors file table lock will be released
thus providing a time gap for socket creation/deletion.

Now update is non atomic and socket may be skipped using calls:

dup2(oldfd, newfd);
close(oldfd);

But this case is not typical. Moreover before this patch skip is possible
too by hiding socket fd in unix socket buffer.

New sockets will be allocated with updated classid because cgroup state
is updated before start of the file descriptors iteration.

So in common cases this patch has no side effects.

Signed-off-by: default avatarDmitry Yakunin <zeil@yandex-team.ru>
Reviewed-by: default avatarKonstantin Khlebnikov <khlebnikov@yandex-team.ru>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent ce9a4186

net/core/netclassid_cgroup.c

+37 −10
Original line number Diff line number Diff line
@@ -53,30 +53,60 @@ static void cgrp_css_free(struct cgroup_subsys_state *css) 
	kfree(css_cls_state(css));

}



/*

 * To avoid freezing of sockets creation for tasks with big number of threads

 * and opened sockets lets release file_lock every 1000 iterated descriptors.

 * New sockets will already have been created with new classid.

 */



struct update_classid_context {

	u32 classid;

	unsigned int batch;

};



#define UPDATE_CLASSID_BATCH 1000



static int update_classid_sock(const void *v, struct file *file, unsigned n)

{

	int err;

	struct update_classid_context *ctx = (void *)v;

	struct socket *sock = sock_from_file(file, &err);



	if (sock) {

		spin_lock(&cgroup_sk_update_lock);

		sock_cgroup_set_classid(&sock->sk->sk_cgrp_data,

					(unsigned long)v);

		sock_cgroup_set_classid(&sock->sk->sk_cgrp_data, ctx->classid);

		spin_unlock(&cgroup_sk_update_lock);

	}

	if (--ctx->batch == 0) {

		ctx->batch = UPDATE_CLASSID_BATCH;

		return n + 1;

	}

	return 0;

}



static void update_classid_task(struct task_struct *p, u32 classid)

{

	struct update_classid_context ctx = {

		.classid = classid,

		.batch = UPDATE_CLASSID_BATCH

	};

	unsigned int fd = 0;



	do {

		task_lock(p);

		fd = iterate_fd(p->files, fd, update_classid_sock, &ctx);

		task_unlock(p);

		cond_resched();

	} while (fd);

}



static void cgrp_attach(struct cgroup_taskset *tset)

{

	struct cgroup_subsys_state *css;

	struct task_struct *p;



	cgroup_taskset_for_each(p, css, tset) {

		task_lock(p);

		iterate_fd(p->files, 0, update_classid_sock,

			   (void *)(unsigned long)css_cls_state(css)->classid);

		task_unlock(p);

		update_classid_task(p, css_cls_state(css)->classid);

	}

}
@@ -98,10 +128,7 @@ static int write_classid(struct cgroup_subsys_state *css, struct cftype *cft, 


	css_task_iter_start(css, 0, &it);

	while ((p = css_task_iter_next(&it))) {

		task_lock(p);

		iterate_fd(p->files, 0, update_classid_sock,

			   (void *)(unsigned long)cs->classid);

		task_unlock(p);

		update_classid_task(p, cs->classid);

		cond_resched();

	}

	css_task_iter_end(&it);

CRA Git | Maintained and supported by SUSTech CRA and CCSE