Messages in this thread |  | | Date | Thu, 26 Aug 2004 05:29:36 +0100 | | From | viro@parcelfa ... | | Subject | Re: Using fs views to isolate untrusted processes: I need an assistant architect in the USA for Phase I of a DARPA funded linux kernel project |
| |
On Thu, Aug 26, 2004 at 12:16:43AM -0400, Kyle Moffett wrote: > I'm well aware of the technique, but I was wondering if there was any > extra VFS baggage associated with a normal bind mount that might > be eliminated by restricting a different version of a bind mount to only > files. That's why I asked later if anybody had benchmarked the bind > mount system to see how well it would scale to 1000 bound files and > directories. If it's not a performance issue then I really don't care > less, > but I have a somewhat old box that must make do as a fileserver, so > I'm very interested in maximizing the performance. I don't care much > about extra RAM consumption, only about CPU and bus usage.
Files and directories are not different in that respect - the only overhead is price of hash lookup when crossing the binding in either case. 1000 bindings shouldn't be a problem - it's 3--5 per hash chain. Wrt memory, it's one struct vfsmount allocated per binding - IOW, about 80Kb total for 1000 of those. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |