From patchwork Mon Sep 14 22:17:36 2015 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Justin Pettit X-Patchwork-Id: 517580 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from archives.nicira.com (unknown [IPv6:2600:3c00::f03c:91ff:fe6e:bdf7]) by ozlabs.org (Postfix) with ESMTP id CECE91401AD for ; Tue, 15 Sep 2015 08:17:46 +1000 (AEST) Received: from archives.nicira.com (localhost [127.0.0.1]) by archives.nicira.com (Postfix) with ESMTP id E0B89108B8; Mon, 14 Sep 2015 15:17:44 -0700 (PDT) X-Original-To: dev@openvswitch.org Delivered-To: dev@openvswitch.org Received: from mx1e4.cudamail.com (mx1.cudamail.com [69.90.118.67]) by archives.nicira.com (Postfix) with ESMTPS id 7B063108B5 for ; Mon, 14 Sep 2015 15:17:43 -0700 (PDT) Received: from bar5.cudamail.com (unknown [192.168.21.12]) by mx1e4.cudamail.com (Postfix) with ESMTPS id EBCB81E0353 for ; Mon, 14 Sep 2015 16:17:42 -0600 (MDT) X-ASG-Debug-ID: 1442269062-09eadd48fa10c420001-byXFYA Received: from mx1-pf1.cudamail.com ([192.168.24.1]) by bar5.cudamail.com with ESMTP id 2ZbKxZwb2GFfoPGb (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 14 Sep 2015 16:17:42 -0600 (MDT) X-Barracuda-Envelope-From: jpettit@nicira.com X-Barracuda-RBL-Trusted-Forwarder: 192.168.24.1 Received: from unknown (HELO mail-pa0-f44.google.com) (209.85.220.44) by mx1-pf1.cudamail.com with ESMTPS (RC4-SHA encrypted); 14 Sep 2015 22:17:41 -0000 Received-SPF: unknown (mx1-pf1.cudamail.com: Multiple SPF records returned) X-Barracuda-RBL-Trusted-Forwarder: 209.85.220.44 Received: by padhk3 with SMTP id hk3so155123711pad.3 for ; Mon, 14 Sep 2015 15:17:40 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id; bh=XdxOSVwdYqynNYzkhQfgygtEAzN6URYu70c92xQeGJg=; b=d8VamN29JOjsaG9Qzra/HlrusyneEgqITTl1QtfxUZxFm23mpFqSbBwE9acxk9dDia xaGYH1nkW4FYDPjTYojpisaPuqXsMPdZhAgF9/v5IU4fVOAMNEsS2YVmLUQFSGzCGSev CwGdwT6lV1/M64a2Dta+cqq46plA0pDiJd3jps87uRpbI2H6HY9Lt7Aexg8gfuz0Zdhj shgJLJf9rhSWTm77uG5kewE/OKlR9xo8PbhPpOvUjNz75UkZQ1QWIkK3GhYDnvsRUnTy 0pBkkU7eXdcOUiFPAd2s49trUfBCZlGiMDjNwiVneIRljw3yjMrrF6jQZeImKIVtl1nn r2+g== X-Gm-Message-State: ALoCoQn6O9qDBG2TZ9zcunMBWEunuNAclZme4XWlrmCSL6b8SjxFYSM6XeMdvTu+6jkqI6uuqW1c X-Received: by 10.66.119.202 with SMTP id kw10mr39571417pab.38.1442269060365; Mon, 14 Sep 2015 15:17:40 -0700 (PDT) Received: from localhost.localdomain ([208.91.2.4]) by smtp.gmail.com with ESMTPSA id mn2sm18042682pbc.75.2015.09.14.15.17.39 for (version=TLSv1/SSLv3 cipher=OTHER); Mon, 14 Sep 2015 15:17:39 -0700 (PDT) X-CudaMail-Envelope-Sender: jpettit@nicira.com X-Barracuda-Apparent-Source-IP: 208.91.2.4 From: Justin Pettit To: dev@openvswitch.org X-CudaMail-Whitelist-To: dev@openvswitch.org X-CudaMail-MID: CM-E1-913093788 X-CudaMail-DTE: 091415 X-CudaMail-Originating-IP: 209.85.220.44 Date: Mon, 14 Sep 2015 15:17:36 -0700 X-ASG-Orig-Subj: [##CM-E1-913093788##][PATCH] FAQ: Add entry about ingress policing. Message-Id: <1442269056-86031-1-git-send-email-jpettit@nicira.com> X-Mailer: git-send-email 1.7.5.4 X-Barracuda-Connect: UNKNOWN[192.168.24.1] X-Barracuda-Start-Time: 1442269062 X-Barracuda-Encrypted: DHE-RSA-AES256-SHA X-Barracuda-URL: https://web.cudamail.com:443/cgi-mod/mark.cgi X-ASG-Whitelist: Header =?UTF-8?B?eFwtY3VkYW1haWxcLXdoaXRlbGlzdFwtdG8=?= X-Virus-Scanned: by bsmtpd at cudamail.com X-Barracuda-BRTS-Status: 1 Subject: [ovs-dev] [PATCH] FAQ: Add entry about ingress policing. X-BeenThere: dev@openvswitch.org X-Mailman-Version: 2.1.16 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: dev-bounces@openvswitch.org Sender: "dev" Signed-off-by: Justin Pettit Acked-by: Ben Pfaff --- FAQ.md | 31 ++++++++++++++++++++++++++++++- 1 files changed, 30 insertions(+), 1 deletions(-) diff --git a/FAQ.md b/FAQ.md index 631f6a4..acec1bd 100644 --- a/FAQ.md +++ b/FAQ.md @@ -944,7 +944,22 @@ A: The short answer is that this is a misuse of a "tap" device. Use Quality of Service (QoS) ------------------------ -### Q: How do I configure Quality of Service (QoS)? +### Q: Does OVS support Quality of Service (QoS)? + +A: Yes. However, it only support traffic shaping on egress traffic; + ingress traffic is limited to policing. Policing is a simple form of + quality-of-service that simply drops packets received in excess of + the configured rate. Due to its simplicity, policing is usually less + accurate and less effective than egress traffic shaping, which queues + packets. + + Keep in mind that ingress and egress are from the perspective of the + switch. That means that egress shaping limits the rate at which + traffic is allowed to transmit from a physical interface, but the + rate at which traffic will be received on a virtual machine's VIF. + For ingress policing, the behavior is the opposite. + +### Q: How do I configure egress traffic shaping? A: Suppose that you want to set up bridge br0 connected to physical Ethernet port eth0 (a 1 Gbps device) and virtual machine interfaces @@ -1006,6 +1021,20 @@ A: Suppose that you want to set up bridge br0 connected to physical --all option), then you will have to destroy QoS and Queue records individually. +### Q: How do I configure ingress policing? + +A: A policing policy can be configured on an interface to drop packets + that arrive at a higher rate than the configured value. For example, + the following commands will rate-limit traffic that vif1.0 may + generate to 10Mbps: + + ovs-vsctl set interface vif1.0 ingress_policing_rate=10000 + ovs-vsctl set interface vif1.0 ingress_policing_burst=1000 + + Traffic policing can interact poorly with some network protocols and + can have surprising results. The "Ingress Policing" section of + ovs-vswitchd.conf.db(5) discusses the issues in greater detail. + ### Q: I configured Quality of Service (QoS) in my OpenFlow network by adding records to the QoS and Queue table, but the results aren't what I expect.