From: Krister Johansen <kjlx@templeofstupid.com> To: Oliver Upton <oliver.upton@linux.dev> Cc: Marc Zyngier <maz@kernel.org>, James Morse <james.morse@arm.com>, Suzuki K Poulose <suzuki.poulose@arm.com>, Zenghui Yu <yuzenghui@huawei.com>, Catalin Marinas <catalin.marinas@arm.com>, Will Deacon <will@kernel.org>, Ali Saidi <alisaidi@amazon.com>, David Reaver <me@davidreaver.com>, linux-arm-kernel@lists.infradead.org, kvmarm@lists.linux.dev, linux-kernel@vger.kernel.org Subject: Re: [PATCH] KVM: arm64: Limit stage2_apply_range() batch size to smallest block Date: Fri, 29 Mar 2024 12:15:37 -0700 [thread overview] Message-ID: <20240329191537.GA2051@templeofstupid.com> (raw) In-Reply-To: <ZgbGtpj5mStTkAkn@linux.dev> Hi Oliver, Thanks for the response. On Fri, Mar 29, 2024 at 06:48:38AM -0700, Oliver Upton wrote: > On Thu, Mar 28, 2024 at 12:05:08PM -0700, Krister Johansen wrote: > > stage2_apply_range() for unmap operations can interfere with the > > performance of IO if the device's interrupts share the CPU where the > > unmap operation is occurring. commit 5994bc9e05c2 ("KVM: arm64: Limit > > stage2_apply_range() batch size to largest block") improved this. Prior > > to that commit, workloads that were unfortunate enough to have their IO > > interrupts pinned to the same CPU as the unmap operation would observe a > > complete stall. With the switch to using the largest block size, it is > > possible for IO to make progress, albeit at a reduced speed. > > Can you describe the workload a bit more? I'm having a hard time > understanding how you're unmapping that much memory on the fly in > your workload. Is guest memory getting swapped? Are VMs being torn > down? Sorry I wasn't clear here. Yes, it's the VMs getting torn down that's causing the problems. The container VMs don't have long lifetimes, but some may be up to 256Gb in size, depending on the user. The workloads running the VMs aren't especially performance sensitive, but their users do notice when network connections time-out. IOW, if the performance is bad enough to temporarily prevent new TCP connections from being established or requests / responses being recieved in a timely fashion, we'll hear about it. Users deploy their services a lot, so there's a lot of container vm churn. (Really it's automation redeploying the services on behalf of the users in response to new commits to their repos...) > Also, it seems a bit odd to steer interrupts *into* the workload you > care about... Ah, that was only intentionally done for the purposes of measuring the impact. That's not done on purpose in production. Nevertheless, the example we tend to run into is that a box may have 2 NICs and each NIC has 32 Tx-Rx queues. This means we've got 64 NIC interrupts, each assigned to a different CPU. Our systems have 64 CPUs. What happens in practice is that a VM will get torn down, and that has a 1-in-64 chance of impacting the performance of the subset of the flows that are mapped via RSS to the interrupt that happens to be assigned to the CPU where the VM is being torn down. Of course, the obvious next question is why not just bind the VMs flows to the CPUs the VM is running on? We don't have a 1:1 mapping of network device to VM, or VM to CPU right now, which frustrates this approach. > > Further reducing the stage2_apply_range() batch size has substantial > > performance improvements for IO that share a CPU performing an unmap > > operation. By switching to a 2mb chunk, IO performance regressions were > > no longer observed in this author's tests. E.g. it was possible to > > obtain the advertised device throughput despite an unmap operation > > occurring on the CPU where the interrupt was running. There is a > > tradeoff, however. No changes were observed in per-operation timings > > when running the kvm_pagetable_test without an interrupt load. However, > > with a 64gb VM, 1 vcpu, and 4k pages and a IO load, map times increased > > by about 15% and unmap times increased by about 58%. In essence, this > > trades slower map/unmap times for improved IO throughput. > > There are other users of the range-based operations, like > write-protection. Live migration is especially sensitive to the latency > of page table updates as it can affect the VMM's ability to converge > with the guest. To be clear, the reduction in performance was observed when I concurrently executed both the kvm_pagetable_test and a networking benchmark where the NIC's interrupts were assigned to the same CPU where the pagetable test was executing. I didn't see a slowdown just running the pagetable test. > > Cc: <stable@vger.kernel.org> # 5.15.x: 3b5c082bbfa2: KVM: arm64: Work out supported block level at compile time > > Cc: <stable@vger.kernel.org> # 5.15.x: 5994bc9e05c2: KVM: arm64: Limit stage2_apply_range() batch size to largest block > > Cc: <stable@vger.kernel.org> # 5.15.x > > This is a performance improvement, *not* a correctness fix. Please don't > cc stable for it. Apologies. I consulted the Stable Rules[1] before applying these tags and the guidance it gave was just that "It must either fix a real bug that bothers people." In our case, the teardown causes TCP throughput to drop from 9.5Gbps to about 2Gbps during a teardown, which is something that does bother our users. > > --- > > arch/arm64/include/asm/kvm_pgtable.h | 4 ++++ > > arch/arm64/kvm/mmu.c | 2 +- > > 2 files changed, 5 insertions(+), 1 deletion(-) > > > > diff --git a/arch/arm64/include/asm/kvm_pgtable.h b/arch/arm64/include/asm/kvm_pgtable.h > > index 19278dfe7978..b0c4651a4d9a 100644 > > --- a/arch/arm64/include/asm/kvm_pgtable.h > > +++ b/arch/arm64/include/asm/kvm_pgtable.h > > @@ -19,11 +19,15 @@ > > * - 4K (level 1): 1GB > > * - 16K (level 2): 32MB > > * - 64K (level 2): 512MB > > + * > > + * The max block level is the _smallest_ supported block size for KVM. > > This feels like a non sequitur given the old comment is left in place... I'll fix if we keep this approach. Is the objection to the name KVM_PGTABLE_MAX_BLOCK_LEVEL or just the comment? > > */ > > #ifdef CONFIG_ARM64_4K_PAGES > > #define KVM_PGTABLE_MIN_BLOCK_LEVEL 1 > > +#define KVM_PGTABLE_MAX_BLOCK_LEVEL 2 > > #else > > #define KVM_PGTABLE_MIN_BLOCK_LEVEL 2 > > +#define KVM_PGTABLE_MAX_BLOCK_LEVEL KVM_PGTABLE_MIN_BLOCK_LEVEL > > #endif > > > > #define kvm_lpa2_is_enabled() system_supports_lpa2() > > diff --git a/arch/arm64/kvm/mmu.c b/arch/arm64/kvm/mmu.c > > index dc04bc767865..1e927b306aee 100644 > > --- a/arch/arm64/kvm/mmu.c > > +++ b/arch/arm64/kvm/mmu.c > > @@ -41,7 +41,7 @@ static phys_addr_t __stage2_range_addr_end(phys_addr_t addr, phys_addr_t end, > > > > static phys_addr_t stage2_range_addr_end(phys_addr_t addr, phys_addr_t end) > > { > > - phys_addr_t size = kvm_granule_size(KVM_PGTABLE_MIN_BLOCK_LEVEL); > > + phys_addr_t size = kvm_granule_size(KVM_PGTABLE_MAX_BLOCK_LEVEL); > > > > return __stage2_range_addr_end(addr, end, size); > > } > > This doesn't feel right to me. A property that we had before is that > leaf entries are visited at most once, since every mapping size was > evenly divisible into KVM_PGTABLE_MIN_BLOCK_LEVEL. > > Seems like we could wind up visiting a PUD mapping 512 times, at least > for 4K pages. I have an idea, but it seems to go against the current design of the pagtable walkers. My sense was that they've been written to discourage passing mutable state to the function that calls kvm_pgtable_walk(). If we were willing to permit this, it seems like we could leverage __kvm_pgtable_visit()'s knowledge about the size of the mapping it walked to determine whether range_addr_end should be incremented by our BLOCK_LEVEL constant, or advanced to the end of the mapping that was already successfully walked. (If I'm reading right, anyway) Does that seem like a reasonable approach? If we do modify the walk to allow state to be passed back, I have a second patch I'd like to send you. Ali found that there was a performance regression on the kvm_pagetable_test on the map creation step when a large number of threads operated on a comparatively small memory range. (E.g. 64 cpus and 8g of RAM). We debugged this a bit and found that there's an unmap in the map creation step if the test ends up instantiating a readable zero page that needs to be copied and made writable. With the deferred TLBI logic, the tlb invalidation happens at the end of the unmap operation whether a PTE is cleared or not. With so many threads, this doesn't always suceeed. The prior approach of just doing the invalidation in stage2_unmap_put_pte() outperforms the deferred invalidation, because stage2_unmap_put_pte() only calls __kvm_tlb_flush_vmid_ipa() if it clears a valid PTE. If we modify the walk to keep state on whether any PTEs are successfully cleared, and condition the deferred invalidation on that state, we obtain performance that is equivalent to the pre range based deferred invalidation approach. Thanks, -K
WARNING: multiple messages have this Message-ID (diff)
From: Krister Johansen <kjlx@templeofstupid.com> To: Oliver Upton <oliver.upton@linux.dev> Cc: Marc Zyngier <maz@kernel.org>, James Morse <james.morse@arm.com>, Suzuki K Poulose <suzuki.poulose@arm.com>, Zenghui Yu <yuzenghui@huawei.com>, Catalin Marinas <catalin.marinas@arm.com>, Will Deacon <will@kernel.org>, Ali Saidi <alisaidi@amazon.com>, David Reaver <me@davidreaver.com>, linux-arm-kernel@lists.infradead.org, kvmarm@lists.linux.dev, linux-kernel@vger.kernel.org Subject: Re: [PATCH] KVM: arm64: Limit stage2_apply_range() batch size to smallest block Date: Fri, 29 Mar 2024 12:15:37 -0700 [thread overview] Message-ID: <20240329191537.GA2051@templeofstupid.com> (raw) In-Reply-To: <ZgbGtpj5mStTkAkn@linux.dev> Hi Oliver, Thanks for the response. On Fri, Mar 29, 2024 at 06:48:38AM -0700, Oliver Upton wrote: > On Thu, Mar 28, 2024 at 12:05:08PM -0700, Krister Johansen wrote: > > stage2_apply_range() for unmap operations can interfere with the > > performance of IO if the device's interrupts share the CPU where the > > unmap operation is occurring. commit 5994bc9e05c2 ("KVM: arm64: Limit > > stage2_apply_range() batch size to largest block") improved this. Prior > > to that commit, workloads that were unfortunate enough to have their IO > > interrupts pinned to the same CPU as the unmap operation would observe a > > complete stall. With the switch to using the largest block size, it is > > possible for IO to make progress, albeit at a reduced speed. > > Can you describe the workload a bit more? I'm having a hard time > understanding how you're unmapping that much memory on the fly in > your workload. Is guest memory getting swapped? Are VMs being torn > down? Sorry I wasn't clear here. Yes, it's the VMs getting torn down that's causing the problems. The container VMs don't have long lifetimes, but some may be up to 256Gb in size, depending on the user. The workloads running the VMs aren't especially performance sensitive, but their users do notice when network connections time-out. IOW, if the performance is bad enough to temporarily prevent new TCP connections from being established or requests / responses being recieved in a timely fashion, we'll hear about it. Users deploy their services a lot, so there's a lot of container vm churn. (Really it's automation redeploying the services on behalf of the users in response to new commits to their repos...) > Also, it seems a bit odd to steer interrupts *into* the workload you > care about... Ah, that was only intentionally done for the purposes of measuring the impact. That's not done on purpose in production. Nevertheless, the example we tend to run into is that a box may have 2 NICs and each NIC has 32 Tx-Rx queues. This means we've got 64 NIC interrupts, each assigned to a different CPU. Our systems have 64 CPUs. What happens in practice is that a VM will get torn down, and that has a 1-in-64 chance of impacting the performance of the subset of the flows that are mapped via RSS to the interrupt that happens to be assigned to the CPU where the VM is being torn down. Of course, the obvious next question is why not just bind the VMs flows to the CPUs the VM is running on? We don't have a 1:1 mapping of network device to VM, or VM to CPU right now, which frustrates this approach. > > Further reducing the stage2_apply_range() batch size has substantial > > performance improvements for IO that share a CPU performing an unmap > > operation. By switching to a 2mb chunk, IO performance regressions were > > no longer observed in this author's tests. E.g. it was possible to > > obtain the advertised device throughput despite an unmap operation > > occurring on the CPU where the interrupt was running. There is a > > tradeoff, however. No changes were observed in per-operation timings > > when running the kvm_pagetable_test without an interrupt load. However, > > with a 64gb VM, 1 vcpu, and 4k pages and a IO load, map times increased > > by about 15% and unmap times increased by about 58%. In essence, this > > trades slower map/unmap times for improved IO throughput. > > There are other users of the range-based operations, like > write-protection. Live migration is especially sensitive to the latency > of page table updates as it can affect the VMM's ability to converge > with the guest. To be clear, the reduction in performance was observed when I concurrently executed both the kvm_pagetable_test and a networking benchmark where the NIC's interrupts were assigned to the same CPU where the pagetable test was executing. I didn't see a slowdown just running the pagetable test. > > Cc: <stable@vger.kernel.org> # 5.15.x: 3b5c082bbfa2: KVM: arm64: Work out supported block level at compile time > > Cc: <stable@vger.kernel.org> # 5.15.x: 5994bc9e05c2: KVM: arm64: Limit stage2_apply_range() batch size to largest block > > Cc: <stable@vger.kernel.org> # 5.15.x > > This is a performance improvement, *not* a correctness fix. Please don't > cc stable for it. Apologies. I consulted the Stable Rules[1] before applying these tags and the guidance it gave was just that "It must either fix a real bug that bothers people." In our case, the teardown causes TCP throughput to drop from 9.5Gbps to about 2Gbps during a teardown, which is something that does bother our users. > > --- > > arch/arm64/include/asm/kvm_pgtable.h | 4 ++++ > > arch/arm64/kvm/mmu.c | 2 +- > > 2 files changed, 5 insertions(+), 1 deletion(-) > > > > diff --git a/arch/arm64/include/asm/kvm_pgtable.h b/arch/arm64/include/asm/kvm_pgtable.h > > index 19278dfe7978..b0c4651a4d9a 100644 > > --- a/arch/arm64/include/asm/kvm_pgtable.h > > +++ b/arch/arm64/include/asm/kvm_pgtable.h > > @@ -19,11 +19,15 @@ > > * - 4K (level 1): 1GB > > * - 16K (level 2): 32MB > > * - 64K (level 2): 512MB > > + * > > + * The max block level is the _smallest_ supported block size for KVM. > > This feels like a non sequitur given the old comment is left in place... I'll fix if we keep this approach. Is the objection to the name KVM_PGTABLE_MAX_BLOCK_LEVEL or just the comment? > > */ > > #ifdef CONFIG_ARM64_4K_PAGES > > #define KVM_PGTABLE_MIN_BLOCK_LEVEL 1 > > +#define KVM_PGTABLE_MAX_BLOCK_LEVEL 2 > > #else > > #define KVM_PGTABLE_MIN_BLOCK_LEVEL 2 > > +#define KVM_PGTABLE_MAX_BLOCK_LEVEL KVM_PGTABLE_MIN_BLOCK_LEVEL > > #endif > > > > #define kvm_lpa2_is_enabled() system_supports_lpa2() > > diff --git a/arch/arm64/kvm/mmu.c b/arch/arm64/kvm/mmu.c > > index dc04bc767865..1e927b306aee 100644 > > --- a/arch/arm64/kvm/mmu.c > > +++ b/arch/arm64/kvm/mmu.c > > @@ -41,7 +41,7 @@ static phys_addr_t __stage2_range_addr_end(phys_addr_t addr, phys_addr_t end, > > > > static phys_addr_t stage2_range_addr_end(phys_addr_t addr, phys_addr_t end) > > { > > - phys_addr_t size = kvm_granule_size(KVM_PGTABLE_MIN_BLOCK_LEVEL); > > + phys_addr_t size = kvm_granule_size(KVM_PGTABLE_MAX_BLOCK_LEVEL); > > > > return __stage2_range_addr_end(addr, end, size); > > } > > This doesn't feel right to me. A property that we had before is that > leaf entries are visited at most once, since every mapping size was > evenly divisible into KVM_PGTABLE_MIN_BLOCK_LEVEL. > > Seems like we could wind up visiting a PUD mapping 512 times, at least > for 4K pages. I have an idea, but it seems to go against the current design of the pagtable walkers. My sense was that they've been written to discourage passing mutable state to the function that calls kvm_pgtable_walk(). If we were willing to permit this, it seems like we could leverage __kvm_pgtable_visit()'s knowledge about the size of the mapping it walked to determine whether range_addr_end should be incremented by our BLOCK_LEVEL constant, or advanced to the end of the mapping that was already successfully walked. (If I'm reading right, anyway) Does that seem like a reasonable approach? If we do modify the walk to allow state to be passed back, I have a second patch I'd like to send you. Ali found that there was a performance regression on the kvm_pagetable_test on the map creation step when a large number of threads operated on a comparatively small memory range. (E.g. 64 cpus and 8g of RAM). We debugged this a bit and found that there's an unmap in the map creation step if the test ends up instantiating a readable zero page that needs to be copied and made writable. With the deferred TLBI logic, the tlb invalidation happens at the end of the unmap operation whether a PTE is cleared or not. With so many threads, this doesn't always suceeed. The prior approach of just doing the invalidation in stage2_unmap_put_pte() outperforms the deferred invalidation, because stage2_unmap_put_pte() only calls __kvm_tlb_flush_vmid_ipa() if it clears a valid PTE. If we modify the walk to keep state on whether any PTEs are successfully cleared, and condition the deferred invalidation on that state, we obtain performance that is equivalent to the pre range based deferred invalidation approach. Thanks, -K _______________________________________________ linux-arm-kernel mailing list linux-arm-kernel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/linux-arm-kernel
next prev parent reply other threads:[~2024-03-29 19:15 UTC|newest] Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top 2024-03-28 19:04 [RFC] KVM: arm64: improving IO performance during unmap? Krister Johansen 2024-03-28 19:04 ` Krister Johansen 2024-03-28 19:05 ` [PATCH] KVM: arm64: Limit stage2_apply_range() batch size to smallest block Krister Johansen 2024-03-28 19:05 ` Krister Johansen 2024-03-29 13:48 ` Oliver Upton 2024-03-29 13:48 ` Oliver Upton 2024-03-29 19:15 ` Krister Johansen [this message] 2024-03-29 19:15 ` Krister Johansen 2024-03-30 10:17 ` Marc Zyngier 2024-03-30 10:17 ` Marc Zyngier 2024-04-02 17:00 ` Krister Johansen 2024-04-02 17:00 ` Krister Johansen 2024-04-04 4:40 ` Krister Johansen 2024-04-04 4:40 ` Krister Johansen 2024-04-04 21:27 ` Ali Saidi 2024-04-04 21:27 ` Ali Saidi 2024-04-04 21:41 ` Krister Johansen 2024-04-04 21:41 ` Krister Johansen
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20240329191537.GA2051@templeofstupid.com \ --to=kjlx@templeofstupid.com \ --cc=alisaidi@amazon.com \ --cc=catalin.marinas@arm.com \ --cc=james.morse@arm.com \ --cc=kvmarm@lists.linux.dev \ --cc=linux-arm-kernel@lists.infradead.org \ --cc=linux-kernel@vger.kernel.org \ --cc=maz@kernel.org \ --cc=me@davidreaver.com \ --cc=oliver.upton@linux.dev \ --cc=suzuki.poulose@arm.com \ --cc=will@kernel.org \ --cc=yuzenghui@huawei.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.