XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Want to compare insecure_nbd but doesn't seem to work (secure does)

    Scheduled Pinned Locked Moved Xen Orchestra
    26 Posts 3 Posters 5.8k Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      sluflyer06
      last edited by sluflyer06

      I wanted to try the new NBD feature, I was able to set it up just fine using the standard secure TLS NBD, when I do backups the status shows using NBD for transfers and I see the lock icon in the network interface for NBD.

      NBD is a little slower than non-NBD method, maybe by about 10% so I wanted to try insecure NBD since this is not in a production environment, i used the remove param on the host and then added the insecure_nbd parameter but that's where it stops, insecure NBD doesn't seem to function. Is there an extra step in XO somewhere for insecure NBD?

      in my config.toml I have both the prefer nbd in the xoapi and the use nbd true in the backups section set.

      Is there something different I need to set in the config.toml for insecure_nbd?

      Thanks!

      S 1 Reply Last reply Reply Quote 0
      • S Offline
        sluflyer06 @sluflyer06
        last edited by

        @sluflyer06 Anyone able to relay what I might need in my config to enable insecure NBD on the XO side? I have the purpose set on the host.

        1 Reply Last reply Reply Quote 0
        • olivierlambertO Offline
          olivierlambert Vates 🪐 Co-Founder CEO
          last edited by

          Hi,

          1. NBD a little slower than non-NBD: that's already weird 🤔
          2. Leaving this thread to @florent when he's around 🙂
          S 1 Reply Last reply Reply Quote 0
          • S Offline
            sluflyer06 @olivierlambert
            last edited by sluflyer06

            @olivierlambert here you can see a side by side of the speeds. Both boxes are Dell R730XD with frequency focused cpu's, the NAS is truenas on dual 8c/16t broadwells at upper 3ghz range, 64GB ram, 10gig network through a brocade switch mounted with NFS and async. xen box a 128GB ram dual e5-2697a 64thread setup boot drive is a seagate nytro SAS ssd, and VM's are on a U2 samsung 1725b 3.2TB nvme drive if any of that matters at all.
            df4e1414-0bc9-46af-9228-9702c33e9a73-image.png

            1 Reply Last reply Reply Quote 0
            • S Offline
              sluflyer06
              last edited by

              I created a fresh Debian 11.7 VM and installed XO from sources from the offical docs and made really no other change and re-ran NBD (secure) vs standard backup to NFS just to get another data point and see a significant performance advantage without NBD which I think is not supposed to be the case?
              16dd3e07-9664-49a6-81e1-946f7df0b5f7-image.png

              1 Reply Last reply Reply Quote 0
              • olivierlambertO Offline
                olivierlambert Vates 🪐 Co-Founder CEO
                last edited by

                Are you using a block based backup repository? (not single VHD files but 2MiB blocks). Maybe the bottleneck is on your NFS side, because on our various tests, the usual bottleneck is the XCP-ng export speed, not the backup repository.

                S 1 Reply Last reply Reply Quote 0
                • S Offline
                  sluflyer06 @olivierlambert
                  last edited by sluflyer06

                  @olivierlambert I am using block based, I can make a test repo on a flash array and see if the spinners are choking on all the small files if that's what you're getting at. The NAS is a dedicated box but very modest by enterprise standard, it's a striped pool with 2 sets of 14TB WD Red's in ZFS (8 drives), typically it does quite well but every use case is different

                  Although I guess if the bottleneck was the storage, the NBD backup would be at worst, as fast as non?

                  1 Reply Last reply Reply Quote 0
                  • olivierlambertO Offline
                    olivierlambert Vates 🪐 Co-Founder CEO
                    last edited by olivierlambert

                    I would love to have a way to know where the back pressure is happening in the stream 🤔 How many VM are you backuping and how many disks?

                    Also, maybe the small blocks are putting too much pressure on your disks, and therefore putting backpressure on the export speed.

                    @florent is there a way to raise the number of parallel downloads?

                    S 1 Reply Last reply Reply Quote 0
                    • S Offline
                      sluflyer06 @olivierlambert
                      last edited by

                      @olivierlambert I'm willing to dig in and provide any data. right now it's 10 VM's all with 1 disk each, i'm currently running a backup without NBD using my flash array as a NFS destination, it's a handful of fast samsung SAS 12 SSD's that are striped (they're 3.2TB each). When that finishes I'll flip NBD back up and re-run so at least I think that will take storage out of the equation I believe.

                      1 Reply Last reply Reply Quote 1
                      • S Offline
                        sluflyer06
                        last edited by sluflyer06

                        Total backup performance was still slower with NBD backing up to a flash pool so my disks do not appear to be the choke point.

                        1 Reply Last reply Reply Quote 0
                        • olivierlambertO Offline
                          olivierlambert Vates 🪐 Co-Founder CEO
                          last edited by olivierlambert

                          How many vCPUs and memory do you have in your XO VM?

                          S 1 Reply Last reply Reply Quote 0
                          • S Offline
                            sluflyer06 @olivierlambert
                            last edited by

                            @olivierlambert 6 and 6gb ram

                            1 Reply Last reply Reply Quote 0
                            • olivierlambertO Offline
                              olivierlambert Vates 🪐 Co-Founder CEO
                              last edited by olivierlambert

                              In XO, are you in http in Settings/server URL when connected, or default? (nothing, meaning https)

                              S 1 Reply Last reply Reply Quote 0
                              • S Offline
                                sluflyer06 @olivierlambert
                                last edited by

                                @olivierlambert http. I'd changed that long time ago for performance

                                1 Reply Last reply Reply Quote 0
                                • olivierlambertO Offline
                                  olivierlambert Vates 🪐 Co-Founder CEO
                                  last edited by olivierlambert

                                  Okay so compare secure NBD vs HTTPS perf then 🙂 I'm pretty sure NBD wins.

                                  Alternatively, you might try to raise the number of parallel NBD chunks to be download at the same time (@florent knows the setting I suppose?)

                                  S 1 Reply Last reply Reply Quote 0
                                  • S Offline
                                    sluflyer06 @olivierlambert
                                    last edited by

                                    @olivierlambert okay yeah I can compare to HTTPS. totally game to try whatever setting he's got to increase the parallel work.

                                    Insecure NBD would good comparison to http but I don't know how to turn that on, I know the purpose to set in host but there must be a config line to make it work in xo.

                                    1 Reply Last reply Reply Quote 0
                                    • olivierlambertO Offline
                                      olivierlambert Vates 🪐 Co-Founder CEO
                                      last edited by

                                      It's only relevant to compare secure vs secure or insecure vs insecure. @florent will guide you when he's around 🙂

                                      S 1 Reply Last reply Reply Quote 0
                                      • S Offline
                                        sluflyer06 @olivierlambert
                                        last edited by

                                        @olivierlambert agree

                                        1 Reply Last reply Reply Quote 0
                                        • florentF Offline
                                          florent Vates 🪐 XO Team
                                          last edited by olivierlambert

                                          hi,

                                          in theory, the insecure nbd should work when adding the insecure_nbd flag to the purpose of the network . Have you got any error message in the xo logs ?

                                          you can add in the xapiOptions part

                                          preferNbd = true
                                          nbdOptions.readAhead = 20 # default 10 
                                          

                                          also do you remote store disks as multiple blocks ?

                                          regards

                                          S 1 Reply Last reply Reply Quote 1
                                          • S Offline
                                            sluflyer06 @florent
                                            last edited by sluflyer06

                                            @florent Yes to multiple blocks. I did see this in host>networks page.9d9de7d0-26b2-46e2-8729-09720ee65eab-image.png

                                            I do (and did) have the preferNbd set.

                                            florentF 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post