From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:51394) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SUvTF-0006sE-HG for qemu-devel@nongnu.org; Thu, 17 May 2012 03:50:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1SUvT6-0008DK-Nd for qemu-devel@nongnu.org; Thu, 17 May 2012 03:50:01 -0400 Received: from mx1.redhat.com ([209.132.183.28]:52562) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SUvT6-0008D8-F0 for qemu-devel@nongnu.org; Thu, 17 May 2012 03:49:52 -0400 Date: Thu, 17 May 2012 08:49:44 +0100 From: "Daniel P. Berrange" Message-ID: <20120517074944.GB24943@redhat.com> References: <1337163047-6159-1-git-send-email-berrange@redhat.com> <20120516154245.0d9b0cec@doriath.home> <4FB3F8DA.4030809@codemonkey.ws> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <4FB3F8DA.4030809@codemonkey.ws> Subject: Re: [Qemu-devel] [PATCH] Add event notification for guest balloon changes Reply-To: "Daniel P. Berrange" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Anthony Liguori Cc: Amit Shah , Markus Armbruster , qemu-devel@nongnu.org, Luiz Capitulino On Wed, May 16, 2012 at 01:58:34PM -0500, Anthony Liguori wrote: > On 05/16/2012 01:42 PM, Luiz Capitulino wrote: > >On Wed, 16 May 2012 11:10:47 +0100 > >"Daniel P. Berrange" wrote: > > > >>From: "Daniel P. Berrange" > >> > >>After setting a balloon target value, applications have to > >>continually poll 'query-balloon' to determine whether the > >>guest has reacted to this request. The virtio-balloon backend > >>knows exactly when the guest has reacted though, and thus it > >>is possible to emit a JSON event to tell the mgmt application > >>whenever the guest balloon changes. > >> > >>This introduces a new 'qemu_balloon_change()' API which is > >>to be called by balloon driver backends, whenever they have > >>a change in balloon value. This takes the 'actual' balloon > >>value, as would be found in the BalloonInfo struct. > >> > >>The qemu_balloon_change API emits a JSON monitor event which > >>looks like: > >> > >> {"timestamp": {"seconds": 1337162462, "microseconds": 814521}, > >> "event": "BALLOON_CHANGE", "data": {"actual": 944766976}} > > > >It's missing an entry in QMP/qmp-events.txt and I have a comment below, > >but in general looks good. > > > >Amit, would be good to get your ack. > > I think it would be safer to limit this event to (1) only firing > once target has been reached (2) firing if target is deviated from > without a corresponding change in target. > > Otherwise, a guest could just flood libvirt with events. This would > queue memory in QEMU indefinitely as the events got queued up to > potentially serving as a DoS against other guests. Hmm, that's a good point, but my concern was that if we only emit the event when the target is reached, what happens if the guest gets very close to the target but never actually reaches it for some reason. Should we perhaps just rate limit it to once per second ? BTW, if we're considering guest initiated events to be a potential DOS in this way, then I should point out the RTC_CHANGE event will already suffer this way, if a malicious guest continually adjusts its hardware close. So we might want to apply rate limiting to that event too ? Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|