yahoo-eng-team team mailing list archive

[Salvatore Orlando <1236704@xxxxxxxxxxxxxxxxxx>]

I did not realize this bug was still open.
Every performance issue deserves high priority.


In this case I have no idea about what would be deemed acceptable; I will update this bug report soon.

As far as I know there are no DB accesses in policy checks.

** Changed in: neutron
   Importance: Undecided => High

** Also affects: neutron/havana
   Importance: Undecided
       Status: New

** Changed in: neutron/grizzly
   Importance: Undecided => High

** Changed in: neutron/havana
   Importance: Undecided => High

** Changed in: neutron/havana
     Assignee: (unassigned) => Salvatore Orlando (salvatore-orlando)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1236704

Title:
  neutron API list calls taking lot of time

Status in OpenStack Neutron (virtual network service):
  Confirmed
Status in neutron grizzly series:
  New
Status in neutron havana series:
  New

Bug description:
  Neutron API calls are taking lot of time compared to nova or keystone service APIs.
  In our deployment - its considerable that we had to increase neutron_url_timeout in nova.conf to 120s.  Required for nova list to succeed.

  In our analysis we found that DB access was quick enough but
  considerable time spent in the following code

  https://github.com/openstack/neutron/blob/master/neutron/api/v2/base.py#L236

  Here is the code for reference
  if do_authz:
              # FIXME(salvatore-orlando): obj_getter might return references to
              # other resources. Must check authZ on them too.
              # Omit items from list that should not be visible
              obj_list = [obj for obj in obj_list
                          if policy.check(request.context,
                                          self._plugin_handlers[self.SHOW],
                                          obj,
                                          plugin=self._plugin)]

  There is a clear comment from Salvatore to fix the above code.

  # FIXME(salvatore-orlando): obj_getter might return references to
              # other resources. Must check authZ on them too.
              # Omit items from list that should not be visible

  Need to fix it or improve the neutron API response time for list calls.
  Commenting the above code improved in my devstack setup for port list to 6 seconds against 18 seconds for about 500 ports.
  This issue is reproduced in Grizzly and I am sure it is an issue for Havana too.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1236704/+subscriptions