Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: improved resource manager based on Rainbow
- Loading branch information
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| //go:build !linux && !darwin && !windows | ||
|
|
||
| package fd | ||
|
|
||
| func GetNumFDs() int { | ||
| return 0 | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,17 @@ | ||
| //go:build linux || darwin | ||
| // +build linux darwin | ||
|
|
||
| // Package fd provides filesystem descriptor count for different architectures. | ||
| package fd | ||
|
|
||
| import ( | ||
| "golang.org/x/sys/unix" | ||
| ) | ||
|
|
||
| func GetNumFDs() int { | ||
| var l unix.Rlimit | ||
| if err := unix.Getrlimit(unix.RLIMIT_NOFILE, &l); err != nil { | ||
| return 0 | ||
| } | ||
| return int(l.Cur) | ||
| } | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| //go:build windows | ||
|
|
||
| package fd | ||
|
|
||
| import ( | ||
| "math" | ||
| ) | ||
|
|
||
| func GetNumFDs() int { | ||
| return math.MaxInt | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,155 @@ | ||
| package main | ||
|
|
||
| import ( | ||
| "log" | ||
|
|
||
| "github.com/dustin/go-humanize" | ||
| "github.com/pbnjay/memory" | ||
|
|
||
| "github.com/ipfs/someguy/internal/fd" | ||
| "github.com/libp2p/go-libp2p" | ||
| "github.com/libp2p/go-libp2p/core/network" | ||
| rcmgr "github.com/libp2p/go-libp2p/p2p/host/resource-manager" | ||
| ) | ||
|
|
||
| // Note: this comes from rainbow/rcmgr.go with minimal adaptations. | ||
|
|
||
| var infiniteResourceLimits = rcmgr.InfiniteLimits.ToPartialLimitConfig().System | ||
|
|
||
| func makeResourceMgrs(maxMemory uint64, maxFD int, connMgrHighWater int) (rm network.ResourceManager, err error) { | ||
| if maxMemory == 0 { | ||
| maxMemory = uint64((float64(memory.TotalMemory()) * 0.85)) | ||
| } | ||
| if maxFD == 0 { | ||
| maxFD = fd.GetNumFDs() / 2 | ||
| } | ||
| return rcmgr.NewResourceManager(rcmgr.NewFixedLimiter(makeResourceManagerConfig(maxMemory, maxFD, connMgrHighWater))) | ||
| } | ||
|
|
||
| func makeResourceManagerConfig(maxMemory uint64, maxFD int, connMgrHighWater int) (limitConfig rcmgr.ConcreteLimitConfig) { | ||
| if maxMemory == 0 { | ||
| maxMemory = uint64((float64(memory.TotalMemory()) * 0.85)) | ||
| } | ||
| if maxFD == 0 { | ||
| maxFD = fd.GetNumFDs() / 2 | ||
| } | ||
|
|
||
| maxMemoryMB := maxMemory / (1024 * 1024) | ||
|
|
||
| // At least as of 2023-01-25, it's possible to open a connection that | ||
| // doesn't ask for any memory usage with the libp2p Resource Manager/Accountant | ||
| // (see https://github.com/libp2p/go-libp2p/issues/2010#issuecomment-1404280736). | ||
| // As a result, we can't currently rely on Memory limits to full protect us. | ||
| // Until https://github.com/libp2p/go-libp2p/issues/2010 is addressed, | ||
| // we take a proxy now of restricting to 1 inbound connection per MB. | ||
| // Note: this is more generous than go-libp2p's default autoscaled limits which do | ||
| // 64 connections per 1GB | ||
| // (see https://github.com/libp2p/go-libp2p/blob/master/p2p/host/resource-manager/limit_defaults.go#L357 ). | ||
| systemConnsInbound := int(1 * maxMemoryMB) | ||
|
|
||
| partialLimits := rcmgr.PartialLimitConfig{ | ||
| System: rcmgr.ResourceLimits{ | ||
| Memory: rcmgr.LimitVal64(maxMemory), | ||
| FD: rcmgr.LimitVal(maxFD), | ||
|
|
||
| Conns: rcmgr.Unlimited, | ||
| ConnsInbound: rcmgr.LimitVal(systemConnsInbound), | ||
| ConnsOutbound: rcmgr.Unlimited, | ||
|
|
||
| Streams: rcmgr.Unlimited, | ||
| StreamsOutbound: rcmgr.Unlimited, | ||
| StreamsInbound: rcmgr.Unlimited, | ||
| }, | ||
|
|
||
| // Transient connections won't cause any memory to be accounted for by the resource manager/accountant. | ||
| // Only established connections do. | ||
| // As a result, we can't rely on System.Memory to protect us from a bunch of transient connection being opened. | ||
| // We limit the same values as the System scope, but only allow the Transient scope to take 25% of what is allowed for the System scope. | ||
| Transient: rcmgr.ResourceLimits{ | ||
| Memory: rcmgr.LimitVal64(maxMemory / 4), | ||
| FD: rcmgr.LimitVal(maxFD / 4), | ||
|
|
||
| Conns: rcmgr.Unlimited, | ||
| ConnsInbound: rcmgr.LimitVal(systemConnsInbound / 4), | ||
| ConnsOutbound: rcmgr.Unlimited, | ||
|
|
||
| Streams: rcmgr.Unlimited, | ||
| StreamsInbound: rcmgr.Unlimited, | ||
| StreamsOutbound: rcmgr.Unlimited, | ||
| }, | ||
|
|
||
| // Lets get out of the way of the allow list functionality. | ||
| // If someone specified "Swarm.ResourceMgr.Allowlist" we should let it go through. | ||
| AllowlistedSystem: infiniteResourceLimits, | ||
|
|
||
| AllowlistedTransient: infiniteResourceLimits, | ||
|
|
||
| // Keep it simple by not having Service, ServicePeer, Protocol, ProtocolPeer, Conn, or Stream limits. | ||
| ServiceDefault: infiniteResourceLimits, | ||
|
|
||
| ServicePeerDefault: infiniteResourceLimits, | ||
|
|
||
| ProtocolDefault: infiniteResourceLimits, | ||
|
|
||
| ProtocolPeerDefault: infiniteResourceLimits, | ||
|
|
||
| Conn: infiniteResourceLimits, | ||
|
|
||
| Stream: infiniteResourceLimits, | ||
|
|
||
| // Limit the resources consumed by a peer. | ||
| // This doesn't protect us against intentional DoS attacks since an attacker can easily spin up multiple peers. | ||
| // We specify this limit against unintentional DoS attacks (e.g., a peer has a bug and is sending too much traffic intentionally). | ||
| // In that case we want to keep that peer's resource consumption contained. | ||
| // To keep this simple, we only constrain inbound connections and streams. | ||
| PeerDefault: rcmgr.ResourceLimits{ | ||
| Memory: rcmgr.Unlimited64, | ||
| FD: rcmgr.Unlimited, | ||
| Conns: rcmgr.Unlimited, | ||
| ConnsInbound: rcmgr.DefaultLimit, | ||
| ConnsOutbound: rcmgr.Unlimited, | ||
| Streams: rcmgr.Unlimited, | ||
| StreamsInbound: rcmgr.DefaultLimit, | ||
| StreamsOutbound: rcmgr.Unlimited, | ||
| }, | ||
| } | ||
|
|
||
| scalingLimitConfig := rcmgr.DefaultLimits | ||
| libp2p.SetDefaultServiceLimits(&scalingLimitConfig) | ||
|
|
||
| // Anything set above in partialLimits that had a value of rcmgr.DefaultLimit will be overridden. | ||
| // Anything in scalingLimitConfig that wasn't defined in partialLimits above will be added (e.g., libp2p's default service limits). | ||
| partialLimits = partialLimits.Build(scalingLimitConfig.Scale(int64(maxMemory), maxFD)).ToPartialLimitConfig() | ||
|
|
||
| // Simple checks to override autoscaling ensuring limits make sense versus the connmgr values. | ||
| // There are ways to break this, but this should catch most problems already. | ||
| // We might improve this in the future. | ||
| // See: https://github.com/ipfs/kubo/issues/9545 | ||
| if partialLimits.System.ConnsInbound > rcmgr.DefaultLimit { | ||
| maxInboundConns := int(partialLimits.System.ConnsInbound) | ||
| if connmgrHighWaterTimesTwo := connMgrHighWater * 2; maxInboundConns < connmgrHighWaterTimesTwo { | ||
| maxInboundConns = connmgrHighWaterTimesTwo | ||
| } | ||
|
|
||
| if maxInboundConns < 800 { | ||
| maxInboundConns = 800 | ||
| } | ||
|
|
||
| // Scale System.StreamsInbound as well, but use the existing ratio of StreamsInbound to ConnsInbound | ||
| if partialLimits.System.StreamsInbound > rcmgr.DefaultLimit { | ||
| partialLimits.System.StreamsInbound = rcmgr.LimitVal(int64(maxInboundConns) * int64(partialLimits.System.StreamsInbound) / int64(partialLimits.System.ConnsInbound)) | ||
| } | ||
| partialLimits.System.ConnsInbound = rcmgr.LimitVal(maxInboundConns) | ||
| } | ||
|
|
||
| log.Printf(` | ||
| go-libp2p Resource Manager limits based on: | ||
| - --max-memory: %s | ||
| - --max-fd: %d | ||
| `, humanize.Bytes(maxMemory), maxFD) | ||
|
|
||
| // We already have a complete value thus pass in an empty ConcreteLimitConfig. | ||
| return partialLimits.Build(rcmgr.ConcreteLimitConfig{}) | ||
| } | ||
Oops, something went wrong.