<div dir="ltr"><div><div><div><div><div>Hi Yaniv,<br><br></div>I tried looking into rng direction and I found below stats.<br></div>I am not familiar with rng device but it look to me /dev/urandom giving me better option.<br></div>But I am unaware how can I use urandom device in ovirt.<br><br>RANDOM DEVICE ======><br>cat /dev/random | rngtest -c 1000<br>
rngtest 5<br>
Copyright (c) 2004 by Henrique de Moraes Holschuh<br>
This is free software; see the source for copying conditions. There is
NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.<br>
<br>
rngtest: starting FIPS tests...<br>
rngtest: bits received from input: 20000032<br>
rngtest: FIPS 140-2 successes: 1000<br>
rngtest: FIPS 140-2 failures: 0<br>
rngtest: FIPS 140-2(2001-10-10) Monobit: 0<br>
rngtest: FIPS 140-2(2001-10-10) Poker: 0<br>
rngtest: FIPS 140-2(2001-10-10) Runs: 0<br>
rngtest: FIPS 140-2(2001-10-10) Long run: 0<br>
rngtest: FIPS 140-2(2001-10-10) Continuous run: 0<br>
rngtest: input channel speed: (min=3.594; avg=4.813; max=5.968)Mibits/s<br>
rngtest: FIPS tests speed: (min=93.958; avg=129.073; max=157.632)Mibits/s<br>
rngtest: Program run time: 4111375 microseconds<br><br>URANDOM DEVICE ======><br>cat /dev/urandom | rngtest -c 1000<br>
rngtest 5<br>
Copyright (c) 2004 by Henrique de Moraes Holschuh<br>
This is free software; see the source for copying conditions. There is
NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.<br>
<br>
rngtest: starting FIPS tests...<br>
rngtest: bits received from input: 20000032<br>
rngtest: FIPS 140-2 successes: 1000<br>
rngtest: FIPS 140-2 failures: 0<br>
rngtest: FIPS 140-2(2001-10-10) Monobit: 0<br>
rngtest: FIPS 140-2(2001-10-10) Poker: 0<br>
rngtest: FIPS 140-2(2001-10-10) Runs: 0<br>
rngtest: FIPS 140-2(2001-10-10) Long run: 0<br>
rngtest: FIPS 140-2(2001-10-10) Continuous run: 0<br>
rngtest: input channel speed: (min=1.035; avg=17.311; max=18.626)Gibits/s<br>
rngtest: FIPS tests speed: (min=119.959; avg=161.107; max=164.427)Mibits/s<br>
rngtest: Program run time: 120154 microseconds<br><br></div>Thanks,<br></div>~Rohit<br><div><div><br><div><div><br></div></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun 30, 2017 at 7:42 PM, TranceWorldLogic . <span dir="ltr"><<a href="mailto:tranceworldlogic@gmail.com" target="_blank">tranceworldlogic@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div>Your understanding is correct issue only due to encryption/decryption process but not got idea why not word.<br></div>I found that in centos 7 we not have install rng-tools.<br><br></div>Do it required to install for random generator ?<br><br></div>I have changes nothing I just increase number of queues in vnet. It diffenetly increase throughput and create multiple softIRQs in VM.<br></div><div>But for normal traffic this all things are not required it gives 10G throughput.<br></div><div><br></div>Thanks,<br></div>~Rohit<br></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun 30, 2017 at 7:08 PM, Yaniv Kaul <span dir="ltr"><<a href="mailto:ykaul@redhat.com" target="_blank">ykaul@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote"><span>On Fri, Jun 30, 2017 at 4:14 PM, TranceWorldLogic . <span dir="ltr"><<a href="mailto:tranceworldlogic@gmail.com" target="_blank">tranceworldlogic@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div>Hi Yaniv,<br><br></div>I have enabled random generator in cluster and also in VM.<br></div>But still not see any improvement in throughput. <br><br>lsmod | grep -i virtio<br>virtio_rng 13019 0 <br></div></div></div></div></blockquote><div><br></div></span><div>Are you sure it's being used? What is the qemu command line (do you see the device in the guest?)</div><span><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div>virtio_balloon 13834 0 <br>virtio_console 28115 2 <br>virtio_blk 18156 4 <br>virtio_scsi 18361 0 <br>virtio_net 28024 0 <br>virtio_pci 22913 0 <br>virtio_ring 21524 7 virtio_blk,virtio_net,virtio_p<wbr>ci,virtio_rng,virtio_balloon,v<wbr>irtio_console,virtio_scsi<br>virtio 15008 7 virtio_blk,virtio_net,virtio_p<wbr>ci,virtio_rng,virtio_balloon,v<wbr>irtio_console,virtio_scsi<br><br></div>Would please check do I missing some virtio module ?<br><br></div><div>One more finding, if I set queue property in vnic profile then I got good throughput.<br></div></div></div></blockquote><div><br></div></span><div>Interesting - I had assumed the bottleneck would be the encryption/decryption process, not the network. What do you set exactly? Does it matter in non-encrypted traffic as well? Are the packets (and the whole communication) large or small (i.e, would jumbo frames help) ?</div><span class="m_-6668219388073357202HOEnZb"><font color="#888888"><div> Y.</div></font></span><div><div class="m_-6668219388073357202h5"><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div></div><div><br></div>Thanks,<br></div>~Rohit<br><div><div><div><div><div><br></div></div></div></div></div></div><div class="m_-6668219388073357202m_-9092840673908926290HOEnZb"><div class="m_-6668219388073357202m_-9092840673908926290h5"><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun 30, 2017 at 12:11 AM, Yaniv Kaul <span dir="ltr"><<a href="mailto:ykaul@redhat.com" target="_blank">ykaul@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote"><span>On Thu, Jun 29, 2017 at 4:02 PM, TranceWorldLogic . <span dir="ltr"><<a href="mailto:tranceworldlogic@gmail.com" target="_blank">tranceworldlogic@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div>Got it, just I need to do modprobe to add virtio-rng driver.<br></div>I will try with this option.<br></div></div></div></blockquote><div><br></div></span><div>Make sure it is checked on the cluster.</div><span class="m_-6668219388073357202m_-9092840673908926290m_-1515199059840234428HOEnZb"><font color="#888888"><div>Y. </div></font></span><div><div class="m_-6668219388073357202m_-9092840673908926290m_-1515199059840234428h5"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><br></div>Thanks for your help,<br></div>~Rohit<br></div><div class="m_-6668219388073357202m_-9092840673908926290m_-1515199059840234428m_3029035697055674764HOEnZb"><div class="m_-6668219388073357202m_-9092840673908926290m_-1515199059840234428m_3029035697055674764h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 29, 2017 at 6:20 PM, TranceWorldLogic . <span dir="ltr"><<a href="mailto:tranceworldlogic@gmail.com" target="_blank">tranceworldlogic@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>Hi,<br><br>I am using host as Centos 7.3 and guest also centos 7.3<br></div>it have 3.10 kernel version.<br><br></div>But I not see virtio-rng in guest VM. Is this module come with kernel or separately I have to install ?<br><br></div>Thanks,<br></div>~Rohit<br></div><div class="m_-6668219388073357202m_-9092840673908926290m_-1515199059840234428m_3029035697055674764m_4791659769671190479HOEnZb"><div class="m_-6668219388073357202m_-9092840673908926290m_-1515199059840234428m_3029035697055674764m_4791659769671190479h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 29, 2017 at 5:28 PM, Yaniv Kaul <span dir="ltr"><<a href="mailto:ykaul@redhat.com" target="_blank">ykaul@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote"><span>On Thu, Jun 29, 2017 at 10:07 AM, TranceWorldLogic . <span dir="ltr"><<a href="mailto:tranceworldlogic@gmail.com" target="_blank">tranceworldlogic@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div>Hi,<br><br></div>To increase network throughput we have changed txqueuelen of network device and bridge manually. And observed improved throughput.<br></div></div></div></div></div></div></blockquote><div><br></div></span><div>Interesting, as I've read the default (1000) should be good enough for 10g, for example.</div><div><br></div><div>Are you actually seeing errors on the interface (overruns) and such?</div><span><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><br></div>But in ovirt I not see any option to increase txqueuelen.<br></div></div></div></div></div></blockquote><div><br></div></span><div>Perhaps use ifup-local script to set it when the interface goes up?</div><span><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div></div>Can someone suggest me what will be the right way to increase throughput ?<br><br></div>Note: I am trying to increase throughput for ipsec packets.<br></div></div></div></blockquote><div><br></div></span><div>For ipsec, probably best to ensure virtio-rng is enabled.</div><div>Y.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><br></div>Thanks,<br></div>~Rohit<br></div>
<br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman<wbr>/listinfo/users</a><br>
<br></blockquote></div><br></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div></div></div><br></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div></div></div><br></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>