On Wed, Sep 25, 2019 at 1:44 AM Greg KH greg@kroah.com wrote:
On Wed, Sep 25, 2019 at 12:53:48AM -0500, Dave Chiluk wrote:
Commit de53fd7aedb1 ("sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices") fixes a major performance issue for containerized clouds such as Kubernetes.
Commit de53fd7aedb1 Fixes commit : 512ac999d275 ("sched/fair: Fix bandwidth timer clock drift condition").
This should be applied to all stable kernels that applied commit 512ac999d275, and should probably be applied to all others as well.
As this commit isn't in a released kernel just yet, we should wait to see what happens when it hits people's machines, right?
I think waiting till 5.4 is released would be irresponsible on this one. 512ac999 was recently pushed back into many of the distro kernels via the stable streams. Additionally every major container running cloud provider (public and private), is likely hitting this whether they've noticed or not. Before 512ac999 we would hit the issue that resolved once every 10000 application deployments or so *(I admit some providers appear to have been hit by that more often). However, the fix implemented by 512ac999 is guaranteed to affect 100% of cgroup cpu bandwidth constrained applications.
Our java applications are particularly hard hit as java tends to be very thread happy. Doing some napkin math, given the roughly 9000 applications we have running in our clouds we've had to over-allocate each one's CPU quota by roughly .5 cpu to account for this behavior change (worst case scenario is actually .01 cpu * cores in machine, but not all of our applications are affected equally). 9000 applications * .5 CPU = 4500 cores 4500 Cores / 88 cores per node = 51 additional machines required to satisfy the inflated quota requirements. Given each 88 core machine costs roughly $30k that equates to $1.5M that this issue is costing us. We have been able to alleviate this somewhat of this by turning on CPU overcommit on in the container scheduler. (Deploying more applications per host than the CPU would generally allow for). This however leads to occasional overloaded machines, and regular high response times/wide response time distributions for applications.
If you have a java or golang application running on a containerized cloud anywhere chances are you are either paying extra to get the CPU you need or your application is being throttled before using the quota you've paid for. I'm sure other languages could be affected, but these are the two we've seen that by default generate enough threads to regularly hit this issue.
All of these problems are leading the kubernetes community to change the defaulrs away from the cfs bandwidth scheduling mechanisms and towards other mechanisms or hackish workarounds. *(adjusting periods, turning off cfs bandwidth, moving to only soft limits). https://github.com/kubernetes/kubernetes/issues/67577 https://github.com/kubernetes/kubernetes/issues/70585 https://github.com/kubernetes/kubernetes/issues/51135
I appreciate your reluctance to accept this patch, but I strongly believe pulling this sooner than later is the right thing to do.
Also, always cc: all of the people involved in the patch you are asking for, so as to get their opinion.
Fixed. I'll submit a change to stable-kernel-rules.rst upon my return from vacation.
For some reason this patch did not have a cc: stable tag on it, was that because the developers did not think it was relevant for stable kernels?
This was my fault, I was unaware I could simply cc: stable to have it auto-submitted. I promise I'll be better in the future.
It may also be prudent to also apply the not yet accepted patch that fixes some introduced compiler warnings discussed here. https://lkml.org/lkml/2019/9/18/925
So we should wait for this to hit Linus's tree too, right?
This patch contributes nothing materially to de53fd7aedb1, and only eliminates compiler warnings for unused variables *(which likely get optimized out anyway). I'm not sure what the stable policy is with introduced compiler warnings, so I included the patch submission in this discussion for completeness.
Thank you, Dave Chiluk