XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Alert: Control Domain Memory Usage

    Scheduled Pinned Locked Moved Solved Compute
    194 Posts 21 Posters 201.4k Views 16 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      MrMike
      last edited by

      We also have 10GbE Intel interfaces on the affected servers, not using iscsi yet on these servers.

      So I think the comon factors right now would be the sas megaraid and 10GbE Intel nics?

      1 Reply Last reply Reply Quote 1
      • D Offline
        daKju
        last edited by

        We also have the same setup, running on affected hosts with iSCSI pool devices connected

        Module                  Size  Used by
        tun                    49152  0
        iscsi_tcp              20480  5
        libiscsi_tcp           28672  1 iscsi_tcp
        libiscsi               61440  2 libiscsi_tcp,iscsi_tcp
        scsi_transport_iscsi   110592  3 iscsi_tcp,libiscsi
        dm_service_time        16384  4
        arc4                   16384  0
        md4                    16384  0
        nls_utf8               16384  1
        cifs                  929792  2
        ccm                    20480  0
        fscache               380928  1 cifs
        bnx2fc                159744  0
        cnic                   81920  1 bnx2fc
        uio                    20480  1 cnic
        fcoe                   32768  0
        libfcoe                77824  2 fcoe,bnx2fc
        libfc                 147456  3 fcoe,bnx2fc,libfcoe
        openvswitch           147456  12
        nsh                    16384  1 openvswitch
        nf_nat_ipv6            16384  1 openvswitch
        nf_nat_ipv4            16384  1 openvswitch
        nf_conncount           16384  1 openvswitch
        nf_nat                 36864  3 nf_nat_ipv6,nf_nat_ipv4,openvswitch
        8021q                  40960  0
        garp                   16384  1 8021q
        mrp                    20480  1 8021q
        stp                    16384  1 garp
        llc                    16384  2 stp,garp
        ipt_REJECT             16384  3
        nf_reject_ipv4         16384  1 ipt_REJECT
        xt_tcpudp              16384  9
        xt_multiport           16384  1
        xt_conntrack           16384  5
        nf_conntrack          163840  6 xt_conntrack,nf_nat,nf_nat_ipv6,nf_nat_ipv4,openvswitch,nf_conncount
        nf_defrag_ipv6         20480  2 nf_conntrack,openvswitch
        nf_defrag_ipv4         16384  1 nf_conntrack
        libcrc32c              16384  3 nf_conntrack,nf_nat,openvswitch
        iptable_filter         16384  1
        dm_multipath           32768  5 dm_service_time
        intel_powerclamp       16384  0
        crct10dif_pclmul       16384  0
        crc32_pclmul           16384  0
        ghash_clmulni_intel    16384  0
        pcbc                   16384  0
        aesni_intel           200704  0
        aes_x86_64             20480  1 aesni_intel
        crypto_simd            16384  1 aesni_intel
        cryptd                 28672  3 crypto_simd,ghash_clmulni_intel,aesni_intel
        glue_helper            16384  1 aesni_intel
        dm_mod                151552  22 dm_multipath
        ipmi_si                65536  0
        i2c_i801               28672  0
        sg                     40960  0
        ipmi_devintf           20480  0
        i7core_edac            28672  0
        lpc_ich                28672  0
        ipmi_msghandler        61440  2 ipmi_devintf,ipmi_si
        i5500_temp             16384  0
        acpi_power_meter       20480  0
        sunrpc                413696  1
        ip_tables              28672  2 iptable_filter
        x_tables               45056  6 xt_conntrack,iptable_filter,xt_multiport,xt_tcpudp,ipt_REJECT,ip_tables
        sr_mod                 28672  0
        cdrom                  69632  1 sr_mod
        sd_mod                 53248  7
        ata_generic            16384  0
        pata_acpi              16384  0
        uhci_hcd               49152  0
        lpfc                  958464  4
        ata_piix               36864  0
        nvmet_fc               32768  1 lpfc
        nvmet                  69632  1 nvmet_fc
        libata                274432  3 ata_piix,pata_acpi,ata_generic
        nvme_fc                45056  1 lpfc
        nvme_fabrics           24576  1 nvme_fc
        ehci_pci               16384  0
        igb                   233472  0
        ehci_hcd               90112  1 ehci_pci
        nvme_core              81920  2 nvme_fc,nvme_fabrics
        ixgbe                 380928  0
        megaraid_sas          167936  2
        scsi_transport_fc      69632  4 fcoe,lpfc,libfc,bnx2fc
        scsi_dh_rdac           16384  0
        scsi_dh_hp_sw          16384  0
        scsi_dh_emc            16384  0
        scsi_dh_alua           20480  5
        scsi_mod              253952  19 fcoe,lpfc,scsi_dh_emc,sd_mod,dm_multipath,scsi_transport_iscsi,scsi_dh_alua,scsi_transport_fc,libfc,iscsi_tcp,bnx2fc,libiscsi,megaraid_sas,libata,sg,scsi_dh_rdac,scsi_dh_hp_sw,sr_mod
        ipv6                  548864  173 nf_nat_ipv6
        crc_ccitt              16384  1 ipv6
        
        
        1 Reply Last reply Reply Quote 0
        • stormiS Offline
          stormi Vates 🪐 XCP-ng Team
          last edited by

          We have a pro-support user who also is affected. ixgbe is present but no megaraid_sas.

          If (and only if) the leak cause is common to everyone, then ixgbe would then be the main suspect.

          1 Reply Last reply Reply Quote 0
          • olivierlambertO Offline
            olivierlambert Vates 🪐 Co-Founder CEO
            last edited by

            @stormi we are using ixgbe in our lab with a huge uptime without having any leak.

            We don't use iSCSI like @MrMike so I don't think it will be easy to track it. At least, it's not obvious.

            That's why I think having a remote access on the host is essential to move forward 🙂

            M 1 Reply Last reply Reply Quote 0
            • M Offline
              MrMike @olivierlambert
              last edited by MrMike

              @olivierlambert The servers (2) I am seeing the memory leaks are used exclusively for network intensive applications. they route and tunnel many (100+) tunnels.

              Other systems I have with similar host configuration are not seeing any increased domain memory usage.

              M 1 Reply Last reply Reply Quote 1
              • M Offline
                MrMike @MrMike
                last edited by

                So, I checked the other hosts in my environment that run the same types of VMs and also have the same version of xcp-ng.

                Hosts that are not seeing this memory leak have BCM5720 1GbE interfaces. They are not as heavily used so I'm not sure if the leak only occurs if usage is very high or using a specific feature/ function in that driver.

                1 Reply Last reply Reply Quote 0
                • stormiS Offline
                  stormi Vates 🪐 XCP-ng Team
                  last edited by stormi

                  So, @r1 has prepared a kernel RPM for XCP-ng 8.1 that enables kmemleak. If anyone wants to give it a try (on XCP-ng 8.1 only), you can install it with:

                  yum install http://koji.xcp-ng.org/kojifiles/work/tasks/7624/17624/kernel-4.19.19-6.0.12.1.1.kmemleak.xcpng8.1.x86_64.rpm
                  reboot
                  

                  You can revert to the main kernel with:

                  # yum downgrade won't work for the kernel because it's a protected package, so let's use rpm
                  yumdownloader
                  rpm -Uv --oldpackage name-of-file.rpm
                  reboot
                  

                  There will be some performance impact that I'm not able to quantify and I'm not yet able to tell you how to use it to debug memory leaks, but there's plenty of documentation on the internet about kmemleak.

                  delafD 1 Reply Last reply Reply Quote 0
                  • delafD Offline
                    delaf @stormi
                    last edited by

                    Hello,

                    We have the same problem here on multiple servers.

                    We also have 10G interfaces. We use ext local SR.

                    (::bbxl0271) (2 running) [08:43 bbxl0271 ~]# lsmod  | sort -k 2 -n  -r
                    ipv6                  548864  313 nf_nat_ipv6
                    sunrpc                413696  18 lockd,nfsv3,nfs_acl,nfs
                    ixgbe                 380928  0
                    fscache               380928  1 nfs
                    nfs                   307200  2 nfsv3
                    libata                274432  2 libahci,ahci
                    xhci_hcd              258048  1 xhci_pci
                    scsi_mod              253952  15 fcoe,scsi_dh_emc,sd_mod,dm_multipath,scsi_dh_alua,scsi_transport_fc,usb_storage,libfc,bnx2fc,uas,megaraid_sas,libata,sg,scsi_dh_rdac,scsi_dh_hp_sw
                    aesni_intel           200704  0
                    megaraid_sas          167936  4
                    nf_conntrack          163840  6 xt_conntrack,nf_nat,nf_nat_ipv6,nf_nat_ipv4,openvswitch,nf_conncount
                    bnx2fc                159744  0
                    dm_mod                151552  5 dm_multipath
                    openvswitch           147456  12
                    libfc                 147456  3 fcoe,bnx2fc,libfcoe
                    hid                   122880  2 usbhid,hid_generic
                    mei                   114688  1 mei_me
                    lockd                 110592  2 nfsv3,nfs
                    cnic                   81920  1 bnx2fc
                    libfcoe                77824  2 fcoe,bnx2fc
                    usb_storage            73728  1 uas
                    scsi_transport_fc      69632  3 fcoe,libfc,bnx2fc
                    ipmi_si                65536  0
                    ipmi_msghandler        61440  2 ipmi_devintf,ipmi_si
                    usbhid                 57344  0
                    sd_mod                 53248  5
                    tun                    49152  0
                    nfsv3                  49152  1
                    x_tables               45056  6 xt_conntrack,iptable_filter,xt_multiport,xt_tcpudp,ipt_REJECT,ip_tables
                    mei_me                 45056  0
                    sg                     40960  0
                    libahci                40960  1 ahci
                    ahci                   40960  0
                    8021q                  40960  0
                    nf_nat                 36864  3 nf_nat_ipv6,nf_nat_ipv4,openvswitch
                    fcoe                   32768  0
                    dm_multipath           32768  0
                    uas                    28672  0
                    lpc_ich                28672  0
                    ip_tables              28672  2 iptable_filter
                    i2c_i801               28672  0
                    cryptd                 28672  3 crypto_simd,ghash_clmulni_intel,aesni_intel
                    uio                    20480  1 cnic
                    scsi_dh_alua           20480  0
                    nf_defrag_ipv6         20480  2 nf_conntrack,openvswitch
                    mrp                    20480  1 8021q
                    ipmi_devintf           20480  0
                    aes_x86_64             20480  1 aesni_intel
                    acpi_power_meter       20480  0
                    xt_tcpudp              16384  9
                    xt_multiport           16384  1
                    xt_conntrack           16384  5
                    xhci_pci               16384  0
                    stp                    16384  1 garp
                    skx_edac               16384  0
                    scsi_dh_rdac           16384  0
                    scsi_dh_hp_sw          16384  0
                    scsi_dh_emc            16384  0
                    pcbc                   16384  0
                    nsh                    16384  1 openvswitch
                    nfs_acl                16384  1 nfsv3
                    nf_reject_ipv4         16384  1 ipt_REJECT
                    nf_nat_ipv6            16384  1 openvswitch
                    nf_nat_ipv4            16384  1 openvswitch
                    nf_defrag_ipv4         16384  1 nf_conntrack
                    nf_conncount           16384  1 openvswitch
                    llc                    16384  2 stp,garp
                    libcrc32c              16384  3 nf_conntrack,nf_nat,openvswitch
                    ipt_REJECT             16384  3
                    iptable_filter         16384  1
                    intel_rapl_perf        16384  0
                    intel_powerclamp       16384  0
                    hid_generic            16384  0
                    grace                  16384  1 lockd
                    glue_helper            16384  1 aesni_intel
                    ghash_clmulni_intel    16384  0
                    garp                   16384  1 8021q
                    crypto_simd            16384  1 aesni_intel
                    crct10dif_pclmul       16384  0
                    crc_ccitt              16384  1 ipv6
                    crc32_pclmul           16384  0
                    

                    I'll install the kmemleak kernel on one server today.

                    delafD 2 Replies Last reply Reply Quote 1
                    • delafD Offline
                      delaf @delaf
                      last edited by

                      @stormi @r1

                      I tried to install the kernel as described, but I got an error :

                      # yum install http://koji.xcp-ng.org/kojifiles/work/tasks/7620/17620/kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64.rpm
                      Loaded plugins: fastestmirror
                      kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64.rpm                                                     |  30 MB  00:00:03
                      Examining /var/tmp/yum-root-Uyd1Lb/kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64.rpm: kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64
                      /var/tmp/yum-root-Uyd1Lb/kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64.rpm: does not update installed package.
                      Error: Nothing to do
                      

                      The host is a 8.1 up to date (latest patchs are installed but I did not reboot yep after).

                      delafD 1 Reply Last reply Reply Quote 0
                      • delafD Offline
                        delaf @delaf
                        last edited by

                        FYI : On one host that has the problem I only have 1 Debian VM that does only one thing : netdata. It is a netdata that get flows from other netdata and that is polled by a prometheus server (which is on another host).

                        Screen Shot 2020-11-13 at 09.26.10.png

                        delafD 1 Reply Last reply Reply Quote 0
                        • delafD Offline
                          delaf @delaf
                          last edited by

                          As soon as I stopped the last VM on the host, there is no more memleak.

                          1 Reply Last reply Reply Quote 0
                          • delafD Offline
                            delaf @delaf
                            last edited by

                            More informations:

                            # rpm -ivh http://koji.xcp-ng.org/kojifiles/work/tasks/7620/17620/kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64.rpm
                            Retrieving http://koji.xcp-ng.org/kojifiles/work/tasks/7620/17620/kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64.rpm
                            Preparing...                          ################################# [100%]
                                package kernel-4.19.19-6.0.12.1.xcpng8.1.x86_64 (which is newer than kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64) is already installed
                                file /boot/System.map-4.19.0+1 from install of kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64 conflicts with file from package kernel-4.19.19-6.0.12.1.xcpng8.1.x86_64
                                file /boot/config-4.19.0+1 from install of kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64 conflicts with file from package kernel-4.19.19-6.0.12.1.xcpng8.1.x86_64
                                file /boot/vmlinuz-4.19.0+1 from install of kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64 conflicts with file from package kernel-4.19.19-6.0.12.1.xcpng8.1.x86_64
                                file /lib/modules/4.19.0+1/kernel/fs/nfs/nfs.ko from install of kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64 conflicts with file from package kernel-4.19.19-6.0.12.1.xcpng8.1.x86_64
                                file /lib/modules/4.19.0+1/kernel/net/netfilter/nf_conntrack.ko from install of kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64 conflicts with file from package kernel-4.19.19-6.0.12.1.xcpng8.1.x86_64
                                file /lib/modules/4.19.0+1/modules.order from install of kernel-4.19.19-6.0.12.1.kmemleak.1.xcpng8.1.x86_64 conflicts with file from package kernel-4.19.19-6.0.12.1.xcpng8.1.x86_64
                            1 Reply Last reply Reply Quote 0
                            • stormiS Offline
                              stormi Vates 🪐 XCP-ng Team
                              last edited by stormi

                              I built a new kernel with memleak, which should install correctly. I've updated my post with the instructions above.

                              delafD 2 Replies Last reply Reply Quote 0
                              • delafD Offline
                                delaf @stormi
                                last edited by

                                @stormi Ok thank you. The installation works.

                                I made another test: use the kernel-alt 4.19.108 on one box. It seems I did not have the issue anymore!

                                1 Reply Last reply Reply Quote 0
                                • delafD Offline
                                  delaf @stormi
                                  last edited by

                                  On server with kmemleak kernel, I get this error:

                                  # echo scan > /sys/kernel/debug/kmemleak 
                                  -bash: echo: write error: Device or resource busy
                                  

                                  Digging a litlle bit, and I found :

                                  # dmesg | grep memleak
                                  [    0.677307] kmemleak: Kernel memory leak detector disabled
                                  [    2.701225] kmemleak: Early log buffer exceeded (5128), please increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE
                                  

                                  So kmemleak is still disabled as DEBUG_KMEMLEAK_EARLY_LOG_SIZE seems to be too small 😞
                                  @stormi Could you rebuild a kernel with an increased DEBUG_KMEMLEAK_EARLY_LOG_SIZE?

                                  Thank you!

                                  1 Reply Last reply Reply Quote 0
                                  • stormiS Offline
                                    stormi Vates 🪐 XCP-ng Team
                                    last edited by

                                    Pinging @r1 about this.

                                    R 1 Reply Last reply Reply Quote 0
                                    • R Offline
                                      r1 XCP-ng Team @stormi
                                      last edited by

                                      @stormi @delaf will check this and do required changes.

                                      R 1 Reply Last reply Reply Quote 0
                                      • R Offline
                                        r1 XCP-ng Team @r1
                                        last edited by

                                        @delaf and others, you can download and install and update from link which should work fine.

                                        After the system is running for some time, user can # echo scan > /sys/kernel/debug/kmemleak and then # cat /sys/kernel/debug/kmemleak to see if there are any unreferenced objects floating in memory.

                                        delafD 1 Reply Last reply Reply Quote 0
                                        • delafD Offline
                                          delaf @r1
                                          last edited by

                                          @r1 installed and it works :

                                          # dmesg | grep kmem
                                          [    6.181218] kmemleak: Kernel memory leak detector initialized
                                          [    6.181223] kmemleak: Automatic memory scanning thread started
                                          

                                          I will check the leaks tomorrow.

                                          delafD 1 Reply Last reply Reply Quote 1
                                          • delafD Offline
                                            delaf @delaf
                                            last edited by delaf

                                            @r1 @stormi for now I don't have any memleak detected :

                                            # uname -a
                                            Linux bb0272.aquaray.com 4.19.0+1 #1 SMP Thu Nov 19 15:15:04 CET 2020 x86_64 x86_64 x86_64 GNU/Linux
                                            # yum list installed | grep kernel
                                            kernel.x86_64                   4.19.19-6.0.12.1.2.kmemleak.xcpng8.1
                                            # cat /sys/kernel/debug/kmemleak
                                            # echo scan > /sys/kernel/debug/kmemleak
                                            # cat /sys/kernel/debug/kmemleak
                                            delafD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post