LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] RFC: Forking ldirecterd [PATCH]

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] RFC: Forking ldirecterd [PATCH]
From: Simon Horman <horms@xxxxxxxxxxxx>
Date: Thu, 29 Nov 2007 17:18:06 +0900
On Thu, Nov 29, 2007 at 05:05:39PM +0900, Simon Horman wrote:
> On Wed, Nov 28, 2007 at 01:56:18AM -0800, Ryan Castellucci wrote:
> > The attached patch modifies ldirectord to fork a process for each
> > virtual server to speed up response time with large numbers of virtual
> > servers. I am testing this vs multiple instances of ldirectord, two
> > virtual servers, three real servers each, and it uses about 25MB less
> > ram over that, and starts up a lot quicker.
> 
> Hi Ryan,
> 
> this patch seems very nice, thanks.
> 
> > Other things to note
> > 
> > $0 is set for the children so you can see what virtual server each is
> > managing, and what real server it's checking from ps
> 
> This will probably work on Linux, but it probably won't work on
> Solaris - they beileve that changing $0 and having that reflected
> in ps is a security problem because it allows people to hide processes
> - i.e. I can hide "fork-bomb" as "/bin/sh". This isn't a big problem
> with regards to your patch, just something I thought might
> be interesting.

Ok, that was a really stupid remark. Obviously ldirectord is related
to lvs which is part of Linux not Solaris !

-- 
Horms



<Prev in Thread] Current Thread [Next in Thread>