Re: [Xen-devel] Limited range for counters in /sys/class/net//statistics/{r, t}x_bytes - 33 bits?

2017-09-02 Thread Andy Smith
Hello, On Sun, Sep 03, 2017 at 03:10:46AM +, Andy Smith wrote: > Is this intentional? I see from: http://elixir.free-electrons.com/linux/v4.9.47/source/drivers/net/xen-netback/interface.c#L228 and: http://elixir.free-electrons.com/linux/v4.10/source/drivers/net/xen-netb

[Xen-devel] Limited range for counters in /sys/class/net//statistics/{r, t}x_bytes - 33 bits?

2017-09-02 Thread Andy Smith
Hello, I stumbled across something I find strange, and I'm not sure if it is a bug or not, but if it is not then still it has some unfortunate repercussions. I have one guest which does a decent amount of traffic (100–200Mbps constantly) and it was brought to my attention that the bandwidth stats

Re: [Xen-devel] mpt3sas bug with Debian jessie kernel only under Xen - "swiotlb buffer is full"

2016-12-05 Thread Andy Smith
Hi Andrew, On Sun, Dec 04, 2016 at 03:59:20PM +, Andrew Cooper wrote: > On 04/12/16 08:32, Andy Smith wrote: > > Under the Debian jessie amd64 kernel (linux-image-3.16.0-4-amd64 > > 3.16.36-1+deb8u2) running under Xen, I cannot put the system's > > storage under heav

Re: [Xen-devel] mpt3sas bug with Debian jessie kernel only under Xen - "swiotlb buffer is full"

2016-12-04 Thread Andy Smith
Hi Andrew, On Sun, Dec 04, 2016 at 03:59:20PM +, Andrew Cooper wrote: > Can you try these two patches from the XenServer Patch queue? > https://github.com/xenserver/linux-3.x.pg/blob/master/master/series#L613-L614 Thanks for getting back to me. I will try this in the next day or two and get b

[Xen-devel] mpt3sas bug with Debian jessie kernel only under Xen - "swiotlb buffer is full"

2016-12-04 Thread Andy Smith
Hi, I have a Debian jessie server with an LSI SAS controller using the mpt3sas driver. Under the Debian jessie amd64 kernel (linux-image-3.16.0-4-amd64 3.16.36-1+deb8u2) running under Xen, I cannot put the system's storage under heavy load without receiving a bunch of "swiotlb buffer is full" ker

Re: [Xen-devel] Possible to prevent dom0 accessing guest memory?

2016-11-14 Thread Andy Smith
Hi George, On Mon, Nov 14, 2016 at 05:09:01PM +, George Dunlap wrote: > There is probably a way to configure Xen to make it possible to build > domains while making a full dump-core difficult to implement even by a > motivated attacker; but that would be quite a bit more work (and very > bespo

Re: [Xen-devel] Possible to prevent dom0 accessing guest memory?

2016-11-14 Thread Andy Smith
Hi Andrew, On Mon, Nov 14, 2016 at 03:06:12PM +, Andrew Cooper wrote: > You have misunderstood a step. > > Dom0 can map all of guest memory. This is how `xl dump-core` is > implemented, as well as how Qemu emulates devices for the guest. Ah, okay, thanks. That is what I feared. Due to deta

[Xen-devel] Possible to prevent dom0 accessing guest memory?

2016-11-14 Thread Andy Smith
Hello, Please forgive me if this is a naive question but I do not know this low-level stuff very well. If the ability of the toolstack to dump a guest's memory (e.g. xl dump-core) were disabled on the hypervisor side, would there be any other way to do so from dom0 without rebooting the machine i

Re: [Xen-devel] PV random device

2015-10-05 Thread Andy Smith
Hi Steven On Tue, Oct 06, 2015 at 03:50:10PM +1100, Steven Haigh wrote: > On 2015-10-06 15:29, Andy Smith wrote: > >- Your typical EntropyKey or OneRNG can generate quite a bit of > > entropy. Maybe 32 kilobytes per second for ~$50 each. > > If you can get one... :) Yea

Re: [Xen-devel] PV random device

2015-10-05 Thread Andy Smith
Hi Sarah, On Mon, Oct 05, 2015 at 09:12:47PM -0700, Sarah Newman wrote: > On 10/05/2015 08:35 PM, Andy Smith wrote: > > So, I've been keeping (PV) domUs topped up with entropy by giving > > them access to hardware RNGs (initially Entropy Keys, but since the > > compa

Re: [Xen-devel] PV random device

2015-10-05 Thread Andy Smith
Hi, On Mon, Oct 05, 2015 at 06:33:49PM -0700, Sarah Newman wrote: > We would like to use something like virtio-rng > http://wiki.qemu-project.org/Features-Done/VirtIORNG with PVM domUs and since > the wiki page on virtio > http://wiki.xen.org/wiki/Virtio_On_Xen says the wiki page is out of date,

Re: [Xen-devel] Xen4.7 unable to get domain type for domid

2015-09-29 Thread Andy Smith
Hi Tianyang, On Mon, Sep 28, 2015 at 10:24:15PM -0400, soapcn wrote: > I keep getting this error about not being able to get domain type > when I try to create a domU. > Xen-4.7, Ubuntu 12.04 I also had this problem recently with regard to some Ubuntu 12.04 domUs, but on Xen 4.4.1, Debian jessie.