From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751642AbcGRRwl (ORCPT ); Mon, 18 Jul 2016 13:52:41 -0400 Received: from mail-io0-f194.google.com ([209.85.223.194]:35273 "EHLO mail-io0-f194.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751211AbcGRRwk (ORCPT ); Mon, 18 Jul 2016 13:52:40 -0400 MIME-Version: 1.0 In-Reply-To: <20160718154512.GK5871@two.firstfloor.org> References: <1468824984-65318-1-git-send-email-kan.liang@intel.com> <20160718151841.GA19066@breakpoint.cc> <20160718154512.GK5871@two.firstfloor.org> From: Cong Wang Date: Mon, 18 Jul 2016 10:52:17 -0700 Message-ID: Subject: Re: [RFC PATCH 00/30] Kernel NET policy To: Andi Kleen Cc: Florian Westphal , kan.liang@intel.com, David Miller , LKML , intel-wired-lan , Linux Kernel Network Developers , Jeff Kirsher , Ingo Molnar , Peter Zijlstra , Alexey Kuznetsov , James Morris , Hideaki YOSHIFUJI , Patrick McHardy , Andrew Morton , Kees Cook , Al Viro , Cyrill Gorcunov , John Stultz , Alex Duyck , ben@decadent.org.uk, decot@googlers.com, Jesse Brandeburg Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Jul 18, 2016 at 8:45 AM, Andi Kleen wrote: >> It seems strange to me to add such policies to the kernel. >> Addmittingly, documentation of some settings is non-existent and one needs >> various different tools to set this (sysctl, procfs, sysfs, ethtool, etc). > > The problem is that different applications need different policies. > > The only entity which can efficiently negotiate between different > applications' conflicting requests is the kernel. And that is pretty > much the basic job description of a kernel: multiplex hardware > efficiently between different users. > > So yes the user space tuning approach works for simple cases > ("only run workloads that require the same tuning"), but is ultimately not > very interesting nor scalable. I don't read the code yet, just the cover letter. We have global tunings, per-network-namespace tunings, per-socket tunings. It is still unclear why you can't just put different applications into different namespaces/containers to get different policies.