On Tue, Apr 16, 2013 at 3:47 AM, Kristoffer Egefelt <kristof...@itoc.dk> wrote:
> Thanks Jesse,
>
> I have a NAT firewall which logs something like this every second - OVS is 
> processing ~400.000 packets/s - and I'm having issues with response times or 
> even timeouts when load > 96%.
> Is there anything I can do about the latency/CPU usage, other than not 
> running OVS on the NAT firewalls ?

There is a fair amount of work going on to improve in this area. If
you have a large number of established flows (instead of just new flow
setups), one thing that might help is to use
ovs-vsctl set bridge BR other-config:flow-eviction-threshold=X
to set the threshold above your expected number of sustained flows.
The default value is 1000.
_______________________________________________
discuss mailing list
discuss@openvswitch.org
http://openvswitch.org/mailman/listinfo/discuss

Reply via email to