thanks for clarifying, Ales!

On Sun, Feb 11, 2024 at 10:37 PM Ales Musil <amu...@redhat.com> wrote:

>
>
>
>
> On Mon, Feb 12, 2024 at 6:37 AM Sri kor <esrik...@gmail.com> wrote:
>
>> Thanks Ales!
>> There are cases where some logical_routers have more MAC_binding entries
>> and need to be flush more frequently than others. In cases like noisy
>> neighbors, bloating mac_binding table, We may need to increase the
>> frequency of flushing mac_binding table for that specific logical_router.
>> If we want to flush the percentage of mac_binding entries per
>> logical_router, is it possible to configure mac_binding_removal_limit in
>> terms of the percentage of entries of LR?
>>
>
> Unfortunately not, that would require code change at the moment.
>
>
>>
>> Our scale is big, When we trigger flushing mac entries for all LRs at a
>> single point of time, that triggers lot of cpu load on ovn central because
>> of ARP learning. Is it possible to trigger flushing MAC_binding table
>> entries of each LR at different times?
>>
>
> With the  mac_binding_removal_limit configured the load should spread out
> over time, because there is a forced timeout of 5 seconds after the limit
> is reached. What might be helpful is the recent addition of configuring the
> aging not only for specific LR but also for specific CIDR within that LR
> [0].
>
>
>>
>> Thanks
>> Srini
>>
>>
>> On Tue, Feb 6, 2024 at 10:45 PM Ales Musil <amu...@redhat.com> wrote:
>>
>>>
>>>
>>> On Tue, Feb 6, 2024 at 6:30 PM Sri kor <esrik...@gmail.com> wrote:
>>>
>>>> Thanks Akes for your inputs.
>>>> I have been monitoring all the table update using ovsdb-mon
>>>> <https://github.com/amorenoz/ovsdb-mon> . I dont see any addition or
>>>> deletion in MAC_binding table updates. I have been running this script
>>>> overnight. There was no change in the count and the table entries. I am
>>>> suspecting that I might have missed some configuration parameter.  I am
>>>> referring here
>>>> <https://github.com/ovn-org/ovn/blob/branch-23.09/northd/aging.c#L116>
>>>>
>>>> *_uuid               : 82d23fff-c341-451f-9208-4429a1b204ec*
>>>>
>>>> *datapath            : 99b6b710-80f9-432b-8c96-0f99d2dea8da*
>>>>
>>>> *ip                  : "172.27.6.45"*
>>>>
>>>> *logical_port        :
>>>> a_ed1328b3_0bb2_4af0_a648_0f01b0363a9e_lrp_8c9bff10_2ae8_4fef_8720_dcde1a5e54dd*
>>>>
>>>> *mac                 : "7e:2e:7f:6b:32:54"*
>>>>
>>>> *timestamp           : 1705947447229*
>>>>
>>>>
>>>> *[root@ovnkube-db-0 ~]# ovsdb-client get-schema-version
>>>> tcp:10.71.1.2:6642 <http://10.71.1.2:6642> --no-leader-only20.29.0*
>>>>
>>>>
>>> I'm sorry I should have spotted the mistake right away. It is indeed the
>>> wrong configuration. Both options are supposed to be set per logical router
>>> [0] instead of NB_Global table.
>>>
>>>
>>>>
>>>> On Tue, Feb 6, 2024 at 4:02 AM Ales Musil <amu...@redhat.com> wrote:
>>>>
>>>>>
>>>>>
>>>>> On Tue, Feb 6, 2024 at 1:23 AM Sri kor via discuss <
>>>>> ovs-discuss@openvswitch.org> wrote:
>>>>>
>>>>>> Hi Team,
>>>>>>
>>>>>> I have configured  mac_binding_age_threshold to 1sec and
>>>>>> mac_binding_removal_limit="5000". I was expecting mac_binding table 
>>>>>> entries
>>>>>> to be flushed, but it's not happening. We are currently using 23.09.1. Is
>>>>>> it a known issue ?
>>>>>> Please advise from below logs.
>>>>>>
>>>>>
>>>>> Hi,
>>>>> in 23.09 we added a mechanism that will refresh MAC bindings that are
>>>>> still in use [0]. Is it possible that there is some traffic flowing which
>>>>> will keep those MAC bindings alive?
>>>>> It also might be a coincidence, but deleted mac bindings might be
>>>>> populated back again so the overall count is the same. I would suggest
>>>>> monitoring MAC binding doesn't have any traffic flowing to see if it goes
>>>>> away.
>>>>>
>>>>> Also the mac_binding_removal_limit option imposes delay for deletion.
>>>>> If this limit is reached next aging can happen only after 5 seconds.
>>>>>
>>>>>
>>>>>>
>>>>>> thanks,
>>>>>> Srini
>>>>>> [root@ovnkube-db-0 log]# ovn-nbctl --version
>>>>>> ovn-nbctl 23.09.1
>>>>>> Open vSwitch Library 3.2.2
>>>>>> DB Schema 7.1.0
>>>>>>
>>>>>> [root@ovnkube-db-0 log]# ovn-nbctl --no-leader-only  find NB_global
>>>>>> _uuid               : d01b9c57-29c5-4b86-8de5-c03a9f30825b
>>>>>> connections         : [6c9c0c05-af2a-43ab-9164-24588e8b0a3c]
>>>>>> external_ids        : {}
>>>>>> hv_cfg              : 12935
>>>>>> hv_cfg_timestamp    : 1705104326732
>>>>>> ipsec               : false
>>>>>> name                : ""
>>>>>> nb_cfg              : 13573
>>>>>> nb_cfg_timestamp    : 1707178571143
>>>>>> options             : {mac_binding_age_threshold="1",
>>>>>> mac_binding_removal_limit="5000", mac_prefix="fe:58:59",
>>>>>> max_tunid="16711680", northd_internal_version="23.09.1-20.29.0-71.6",
>>>>>> northd_probe_interval="5000", ovn-garp-max-timeout-sec="60",
>>>>>> svc_monitor_mac="5a:7f:14:6c:47:da"}
>>>>>> sb_cfg              : 13573
>>>>>> sb_cfg_timestamp    : 1707178571869
>>>>>> ssl                 : []
>>>>>> [root@ovnkube-db-0 log]# ovn-Sbctl --no-leader-only  find SB_global
>>>>>> bash: ovn-Sbctl: command not found
>>>>>> [root@ovnkube-db-0 log]# ovn-sbctl --no-leader-only  find SB_global
>>>>>> _uuid               : 8bb031f1-a428-449d-9559-c4c326e91f2d
>>>>>> connections         : [a501a7ba-8970-4dc3-94db-0088ab951aa5]
>>>>>> external_ids        : {}
>>>>>> ipsec               : false
>>>>>> nb_cfg              : 13573
>>>>>> options             : {mac_binding_age_threshold="1",
>>>>>> mac_binding_removal_limit="5000", mac_prefix="fe:58:59",
>>>>>> max_tunid="16711680", northd_internal_version="23.09.1-20.29.0-71.6",
>>>>>> northd_probe_interval="5000", ovn-garp-max-timeout-sec="60",
>>>>>> svc_monitor_mac="5a:7f:14:6c:47:da"}
>>>>>> ssl                 : []
>>>>>> [root@ovnkube-db-0 ~]# while true; do ovn-sbctl --no-leader-only
>>>>>>  list MAC_Binding | grep mac | wc; sleep 10;done
>>>>>>   10546   31638  442932
>>>>>>   10546   31638  442932
>>>>>>   10546   31638  442932
>>>>>>   10546   31638  442932
>>>>>>   10546   31638  442932
>>>>>>   10546   31638  442932
>>>>>>   10546   31638  442932
>>>>>> _______________________________________________
>>>>>> discuss mailing list
>>>>>> disc...@openvswitch.org
>>>>>> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
>>>>>>
>>>>>
>>>>> Hopefully some of this is helpful.
>>>>>
>>>>> Best regards,
>>>>> Ales
>>>>>
>>>>> [0]
>>>>> https://github.com/ovn-org/ovn/commit/e1ab41ee32aa2782db82406b8bd9cda0e1fabc3c
>>>>>
>>>>>
>>>>> --
>>>>>
>>>>> Ales Musil
>>>>>
>>>>> Senior Software Engineer - OVN Core
>>>>>
>>>>> Red Hat EMEA <https://www.redhat.com>
>>>>>
>>>>> amu...@redhat.com
>>>>> <https://red.ht/sig>
>>>>>
>>>>
>>> Best regards,
>>> Ales
>>>
>>> [0] https://github.com/ovn-org/ovn/blob/branch-23.09/ovn-nb.xml#L165
>>> --
>>>
>>> Ales Musil
>>>
>>> Senior Software Engineer - OVN Core
>>>
>>> Red Hat EMEA <https://www.redhat.com>
>>>
>>> amu...@redhat.com
>>> <https://red.ht/sig>
>>>
>>
> Best regards,
> Ales
>
> [0] https://github.com/ovn-org/ovn/blob/main/ovn-nb.xml#L2696
>
> --
>
> Ales Musil
>
> Senior Software Engineer - OVN Core
>
> Red Hat EMEA <https://www.redhat.com>
>
> amu...@redhat.com
> <https://red.ht/sig>
>
_______________________________________________
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Reply via email to