Bug 1818501

Summary:	[ovn-controller] Adding security group rules for the VM takes more time
Product:	Red Hat Enterprise Linux Fast Datapath	Reporter:	anil venkata <vkommadi>
Component:	OVN	Assignee:	Dumitru Ceara <dceara>
Status:	VERIFIED ---	QA Contact:	Jianlin Shi <jishi>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	RHEL 8.0	CC:	avishnoi, ctrautma, dceara, rkhan
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description anil venkata 2020-03-28 18:09:48 UTC

Description of problem:

Adding security group rules in OSP16 with OVN driver taking more time compared to ML2/OVS driver.

OVN 95 %le for 10 VMs with security groups takes 1069.872 seconds
ML2/OVS 95 %le for 10 VMs with security groups takes 793.85 seconds

http://rdu-storage01.scalelab.redhat.com/anilvenkata/20200327-195549/rally/simple-plugins/all-rally-run-0.html#/BrowbeatPlugin.create_network_nova_boot_ping_sec_groups

http://rdu-storage01.scalelab.redhat.com/anilvenkata/20200328-075419/rally/simple-plugins/all-rally-run-0.html#/BrowbeatPlugin.create_network_nova_boot_ping_sec_groups


I am booting 1000 VMs and each VM with 62 security group rules. The rally test iterates 100 times and in each iteration it creates
1 network and 1 router
7 security groups on these networks
totally 62 security group rules on these 7 security groups
then boots 10 VMs on this network with these 3 security groups (i.e 62 security group rules) and finally ping the VM
note: one of the security group rule is for icmp ping

Used this rally scenario to create security groups and boot the VM
https://review.opendev.org/#/c/714412/3/rally/rally-plugins/netcreate-boot/netcreate_nova_boot_fip_ping_sec_groups.py


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 3 Jianlin Shi 2021-07-08 03:13:57 UTC

set VERIFIED per comment 2