Comment 8 for bug 1513765

Revision history for this message
Ryan Tidwell (ryan-tidwell) wrote : Re: bulk delete ports cost ovs-agent much time

Can confirm that conntrack cleanup seems to be a blocking operation. Can also attest to poor performance. I witnessed my system spend well over 10 minutes spinning on conntrack cleanup of 50 instances and a security group that allows IP traffic from 0.0.0.0, which seems like fairly basic scale. I can only imagine what happens with a more complex security group. Haven't spent much time in the code, and it did appear that there were attempts to clean up conntrack state that had already been cleaned up. I've lost the log file, but I can reset and attempt to reproduce.