From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from [140.186.70.92] (port=50087 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1OocPg-0005VE-Ns for qemu-devel@nongnu.org; Thu, 26 Aug 2010 09:22:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1OocPf-0002Ir-Hs for qemu-devel@nongnu.org; Thu, 26 Aug 2010 09:22:40 -0400 Received: from mail-qw0-f45.google.com ([209.85.216.45]:63029) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OocPf-0002Im-DW for qemu-devel@nongnu.org; Thu, 26 Aug 2010 09:22:39 -0400 Received: by qwh5 with SMTP id 5so1650969qwh.4 for ; Thu, 26 Aug 2010 06:22:38 -0700 (PDT) Message-ID: <4C766A97.4030107@codemonkey.ws> Date: Thu, 26 Aug 2010 08:22:31 -0500 From: Anthony Liguori MIME-Version: 1.0 Subject: Re: [Qemu-devel] [PATCH V2] balloon: Don't try fetching info if machine is stopped References: <8450ea8e785c9049f0b3edddc01650a8c4b9ffe7.1282265244.git.amit.shah@redhat.com> <4C719C7E.6030606@codemonkey.ws> <20100826060513.GF18351@amit-laptop.redhat.com> <4C762058.8070301@redhat.com> <20100826081425.GD9564@redhat.com> In-Reply-To: <20100826081425.GD9564@redhat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "Daniel P. Berrange" Cc: Amit Shah , Paolo Bonzini , agl@us.ibm.com, qemu list , Juan Quintela On 08/26/2010 03:14 AM, Daniel P. Berrange wrote: > On Thu, Aug 26, 2010 at 10:05:44AM +0200, Paolo Bonzini wrote: > >> On 08/26/2010 08:05 AM, Amit Shah wrote: >> >>> This is what I have currently. It would need some timer handling in >>> the save/load case as well, right? >>> >> When loading you won't have any pending "info balloon" command, so I >> think the timer need not be preserved across migration. >> >> Also, 5 seconds for a stopped guest is actually a lot, so maybe Amit's >> original patch or a variant thereof would make sense anyway. >> > We should have a combination of both. If we know the guest is stopped > we should return immediately, otherwise we should use the timer as a > way to cope with a crashed/evil guest. > Stopped doesn't necessarily mean that it's permanently stopped or even that a user has stopped it. We stop a guest during live migration and in some other cases (like on disk error). Returning immediately is an optimization on something that should be a proper fix. Otherwise, you have a guest initiated DoS attack on management tools. Regards, Anthony Liguori > Daniel >