Linux Netfilter development
 help / color / mirror / Atom feed
From: Pablo Neira Ayuso <pablo@netfilter.org>
To: Phil Sutter <phil@nwl.cc>,
	netfilter-devel@vger.kernel.org, eric@garver.life
Subject: Re: [PATCH nft] json: collapse set element commands from parser
Date: Wed, 13 Nov 2024 12:01:07 +0100	[thread overview]
Message-ID: <ZzSG8xWKI5Re0Xcy@calendula> (raw)
In-Reply-To: <ZzPAE3Gj6qoA8ZAk@orbyte.nwl.cc>

Hi Phil,

On Tue, Nov 12, 2024 at 09:52:35PM +0100, Phil Sutter wrote:
> Hi Pablo,
> 
> On Thu, Oct 31, 2024 at 11:04:11PM +0100, Pablo Neira Ayuso wrote:
> > Side note: While profiling, I can still see lots json objects, this
> > results in memory consumption that is 5 times than native
> > representation. Error reporting is also lagging behind, it should be
> > possible to add a json_t pointer to struct location to relate
> > expressions and json objects.
> 
> I can't quite reproduce this. When restoring a ruleset with ~12.7k
> elements in individual standard syntax commands, valgrind prints:
> 
> | HEAP SUMMARY:
> |     in use at exit: 59,802 bytes in 582 blocks
> |   total heap usage: 954,970 allocs,
> |                     954,388 frees,
> |                  18,300,874 bytes allocated
> 
> Repeating the same in JSON syntax, I get:
> 
> | HEAP SUMMARY:
> |     in use at exit: 61,592 bytes in 647 blocks
> |   total heap usage: 1,200,164 allocs,
> |                     1,199,517 frees,
> |                    38,612,257 bytes allocated
> 
> So this is 38MB vs 18MB? At least far from the mentioned 5 times. Would
> you mind sharing how you got to that number?
> 
> Please kindly find my reproducers attached for reference.

I am using valgrind --tool=massif to measure memory consumption in
userspace.

I used these two files:

- set-init.json-nft, to create the table and set.
- set-65535.nft-json, to create a small set with 64K elements.

then I run:

valgrind --tool=massif nft -f set-65535.nft-json

there is a tool:

ms_print massif.out.XYZ

At "peak time" in heap memory consumption, I can see 60% is consumed
in json objects.

I am looking at the commands and expressions to reduce memory
consumption there. The result of that work will also help json
support.

  reply	other threads:[~2024-11-13 11:01 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-10-31 22:04 [PATCH nft] json: collapse set element commands from parser Pablo Neira Ayuso
2024-11-01 14:55 ` Eric Garver
2024-11-05 13:35 ` Phil Sutter
2024-11-05 16:51   ` Pablo Neira Ayuso
2024-11-05 17:07     ` Phil Sutter
2024-11-13 11:08       ` improving json error reporting [was Re: [PATCH nft] json: collapse set element commands from parser] Pablo Neira Ayuso
2024-11-13 14:18         ` Phil Sutter
2024-11-12 20:52 ` [PATCH nft] json: collapse set element commands from parser Phil Sutter
2024-11-13 11:01   ` Pablo Neira Ayuso [this message]
2024-11-13 11:34     ` Pablo Neira Ayuso
2024-11-13 14:35     ` Phil Sutter

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=ZzSG8xWKI5Re0Xcy@calendula \
    --to=pablo@netfilter.org \
    --cc=eric@garver.life \
    --cc=netfilter-devel@vger.kernel.org \
    --cc=phil@nwl.cc \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox