From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bruce Richardson Subject: Re: DPDK and ASLR Date: Mon, 15 Jun 2015 11:21:39 +0100 Message-ID: <20150615102138.GB3872@bricha3-MOBL3> References: <9478F0FB69DAA249AF0A9BDA1E6ED9521883632F@US70TWXCHMBA07.zam.alcatel-lucent.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "dev@dpdk.org" To: "Assaad, Sami (Sami)" Return-path: Received: from mga01.intel.com (mga01.intel.com [192.55.52.88]) by dpdk.org (Postfix) with ESMTP id 54D77A10 for ; Mon, 15 Jun 2015 12:21:42 +0200 (CEST) Content-Disposition: inline In-Reply-To: <9478F0FB69DAA249AF0A9BDA1E6ED9521883632F@US70TWXCHMBA07.zam.alcatel-lucent.com> List-Id: patches and discussions about DPDK List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" On Fri, Jun 12, 2015 at 10:53:58PM +0000, Assaad, Sami (Sami) wrote: > When I operate a DPDK based application, the EAL always reports the following: > EAL: WARNING: Address Space Layout Randomization (ASLR) is enabled in the kernel. > EAL: This may cause issues with mapping memory into secondary processes. > > Our application is DPDK client/server based and runs properly. > > My questions are: > > * Is this warning of any importance? Yes, it's there for a reason. With ASLR, the position of the hugepage (and other) memory in your DPDK primary process virtual address space will move about from one run to another, and the same with the secondary process. Because of this, you may occasionally get instances where your application fails to run because an essential piece of memory is mapped at address X in the primary, while something else is mapped at address X in the secondary process. How frequently, if ever, this happens will vary from application to application. If ASLR is disabled, the memory mappings created in the primary and secondary processes will be identical and repeatable from one run to another, so you can know that if a set of processes starts once, it will start a second time. With ASLR enabled, that guarantee cannot be made. > > * Should ASLR be disabled? > That is a questions we can't answer for you. ASLR is a security feature in the OS so you should be aware of the implications of disabling it. However, if you need absolute guarantees of repeatabiltiy of mappings from one multi-process run to another, the only way get that - that I am aware of - is to disable ASLR. If an occasional random failure at startup is ok, then ASLR can safely be left on. > * Does ASLR affect DPDK performance? No, it only affects the repeatability of memory mappings at DPDK start-up. Hope this clarifies things. /Bruce >