OpenVZ Forum: Support » Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster

Home » General » Support » Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster (

) 1 Vote

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster [message #53130]

Mon, 15 January 2018 13:15

futureweb
Messages: 11
Registered: August 2017

Junior Member

Hey there,
I know it's about Virtuozzo 7 (already got Support Ticket #18222 because of this) and not OpenVZ - but I'm interested if same Performance Problems are observed with OpenVZ ...

Since Meltdown/Spectre Patches the Performance dropped to unuseable levels. I patched one of our Root Servers which is running 1 (ONE) productive Container with EZ CMS (Apache 2.4.6, PHP 5.6.32) and MySQL/MariaDB DB (5.5.56) to latest VZ Kernel (3.10.0-693.11.6.vz7.40.4)
Root Server is HPE Gen9 Blade Server (Xeon CPU E5-2640 v3 @ 2.60GHz), Storage is Virtuozzo Storage running on SSD only (1-2GB/s Performance) - so rather good Hardware Specs ... Wink

So here what happened when I bootet to patched Kernel:

http://temp.in.futureweb.at/virtuozzo/vz.jpg

completely unusable ... Load AVG spiked up to 150 and more (peaks up to over 200)

Disabling the Security Patches brings the Load down to normal:
Quote:

tee /sys/kernel/debug/x86/*enabled <<< 0

Answer from Virtuozzo Support:

http://temp.in.futureweb.at/virtuozzo/vz1.jpg

http://temp.in.futureweb.at/virtuozzo/vz2.jpg

Essentially this means I can either patch Virtuozzo against Spectre and cripple the Performance that much that the Server is unuseable - or I decide to not patch the Server - keep good Performance but stay vulnerable to Spectre ...
Both options not really satisfactory ...

Anyone else observed similiar issues on OpenVZ? Or got a good Tip for me? Wink

thx, bye from sunny Austria
Andreas Schnederle-Wagner

[Updated on: Mon, 15 January 2018 14:22]

Report message to a moderator

[Message index]

		Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster By: futureweb on Mon, 15 January 2018 13:15
		Re: Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster By: viadck on Mon, 15 January 2018 17:00
		Re: Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster By: wishd on Tue, 16 January 2018 14:47
		Re: Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster By: futureweb on Tue, 16 January 2018 19:09
		Re: Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster By: wishd on Wed, 17 January 2018 15:33
		Re: Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster By: futureweb on Wed, 17 January 2018 15:40
		Re: Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster By: bjdea1 on Tue, 23 January 2018 23:45

Previous Topic:	RHEL5/CentOS5 CVE-2017-5754
Next Topic:	Spectre and Meltdown Patch ASAP Please

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Thu Dec 07 07:01:10 GMT 2023

Total time taken to generate the page: 0.02717 seconds