OpenVZ Forum


Home » General » Support » Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster  () 1 Vote
icon13.gif  Virtuozzo 7 - Meltdown/Spectre Patch Performance desaster [message #53130] Mon, 15 January 2018 13:15 Go to previous message
futureweb is currently offline  futureweb
Messages: 11
Registered: August 2017
Junior Member
Hey there,
I know it's about Virtuozzo 7 (already got Support Ticket #18222 because of this) and not OpenVZ - but I'm interested if same Performance Problems are observed with OpenVZ ...

Since Meltdown/Spectre Patches the Performance dropped to unuseable levels. I patched one of our Root Servers which is running 1 (ONE) productive Container with EZ CMS (Apache 2.4.6, PHP 5.6.32) and MySQL/MariaDB DB (5.5.56) to latest VZ Kernel (3.10.0-693.11.6.vz7.40.4)
Root Server is HPE Gen9 Blade Server (Xeon CPU E5-2640 v3 @ 2.60GHz), Storage is Virtuozzo Storage running on SSD only (1-2GB/s Performance) - so rather good Hardware Specs ... Wink

So here what happened when I bootet to patched Kernel:
http://temp.in.futureweb.at/virtuozzo/vz.jpg

completely unusable ... Load AVG spiked up to 150 and more (peaks up to over 200)

Disabling the Security Patches brings the Load down to normal:
Quote:
tee /sys/kernel/debug/x86/*enabled <<< 0


Answer from Virtuozzo Support:
http://temp.in.futureweb.at/virtuozzo/vz1.jpg
http://temp.in.futureweb.at/virtuozzo/vz2.jpg

Essentially this means I can either patch Virtuozzo against Spectre and cripple the Performance that much that the Server is unuseable - or I decide to not patch the Server - keep good Performance but stay vulnerable to Spectre ...
Both options not really satisfactory ...

Anyone else observed similiar issues on OpenVZ? Or got a good Tip for me? Wink

thx, bye from sunny Austria
Andreas Schnederle-Wagner

[Updated on: Mon, 15 January 2018 14:22]

Report message to a moderator

 
Read Message icon13.gif
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: RHEL5/CentOS5 CVE-2017-5754
Next Topic: Spectre and Meltdown Patch ASAP Please
Goto Forum:
  


Current Time: Tue Feb 27 07:01:22 GMT 2024

Total time taken to generate the page: 0.02669 seconds