KVM Performance Tuning

Overview

The following sections contain VM performance tuning recommendations to improve system performance. These performance recommendations are general guidelines, and are not intended to be all-inclusive.

Refer to the documentation provided by your Linux OS and KVM host vendors for complete details. For example, Redhat provides extensive documentation on using virt-manager and optimizing VM performance. Refer to the Redhat Virtualization Tuning and Optimization Guide for details.

General Recommendations

• Ensure the number of hyper-threaded vCPUs in an instance is always even (4, 6, 8, and so on).
• For best performance, make sure a single instance is confined to a single NUMA. Performance degradation occurs if an instance spans across multiple NUMAs.
• Ensure the physical NICs associated with an instance are connected to the same NUMA/socket where the instance is hosted. Doing so reduces the remote node memory access which, in turn, helps to improve performance.

Recommended BIOS Settings

Ribbon recommends the following BIOS settings in the host for optimum performance.

Procedure

Set CPU Frequency on the Host

The CPU frequency setting determines the  operating clock speed of the processor and in turn the system performance. Red Hat offers a set of in-built tuning profiles and a tool called tuned-adm that helps in configuring the required tuning profile.

Ribbon recommends to apply the throughput-performance tuning profile, which allows the processor to operate at maximum frequency.

1. Determine the active tuning profile:
   # tuned-adm active
Current active profile: powersave


2. Apply the throughput-performance tuning profile:
   # tuned-adm profile throughput-performance

This configuration is persistent across reboots and takes effect immediately. There is no need to reboot the host after configuring this tuning profile.

Perform NUMA Pinning for the VM

Use the procedure below to accomplish NUMA pinning for the VM.

1. Determine the number of NUMA nodes on the host server.

   [root@srvr3320 ~]# lscpu | grep NUMA
   NUMA node(s):          2
   NUMA node0 CPU(s):     0-7,16-23
   NUMA node1 CPU(s):     8-15,24-31
   [root@srvr3320 ~]#

   In this example, there are two NUMA nodes on the server.
   
   

2. Find out which NUMA node the SR-IOV enabled PF is connected to, which will be allocated to the SBC VM for pkt interfaces.

   1. Obtain the bus-info of the PF interface using the command ethtool -I <PF interface name>.
      

      [root@srvr3320 ~]# ethtool -i ens4f0
      driver: igb
      version: 5.6.0-k
      firmware-version: 1.52.0
      expansion-rom-version:
      bus-info: 0000:81:00.0
      supports-statistics: yes
      supports-test: yes
      supports-eeprom-access: yes
      supports-register-dump: yes
      supports-priv-flags: yes
      [root@srvr3320 ~]#

      
      

   2. Identify the NUMA node of the PCI device using cat /sys/bus/pci/devices/<PCI device>/numa_node.

      [root@srvr3320 ~]# cat /sys/bus/pci/devices/0000\:81\:00.0/numa_node
      1

3. Repeat the previous step for other SR-IOV interfaces from which you plan to connect VFs.
   

   Note

   Make sure that all PCI devices are connected to the same NUMA node.

   
   

4. Once the NUMA node is discovered, set the <numatune> of the SBC VM in the VM xml file.

   <numatune>
       <memory mode='preferred' nodeset="1"/>
   </numatune>

Determine Host Processor and CPU Details

To determine the host system's processor and CPU details, enter the following command to determine how many vCPUs are assigned to host CPUs:

lscpu -p

[root@srvr3320 ~]# lscpu -p
# The following is the parsable format, which can be fed to other
# programs. Each different item in every column has an unique ID
# starting from zero.
# CPU,Core,Socket,Node,,L1d,L1i,L2,L3
0,0,0,0,,0,0,0,0
1,1,0,0,,1,1,1,0
2,2,0,0,,2,2,2,0
3,3,0,0,,3,3,3,0
4,4,0,0,,4,4,4,0
5,5,0,0,,5,5,5,0
6,6,0,0,,6,6,6,0
7,7,0,0,,7,7,7,0
8,8,1,1,,8,8,8,1
9,9,1,1,,9,9,9,1
10,10,1,1,,10,10,10,1
11,11,1,1,,11,11,11,1
12,12,1,1,,12,12,12,1
13,13,1,1,,13,13,13,1
14,14,1,1,,14,14,14,1
15,15,1,1,,15,15,15,1
16,0,0,0,,0,0,0,0
17,1,0,0,,1,1,1,0
18,2,0,0,,2,2,2,0
19,3,0,0,,3,3,3,0
20,4,0,0,,4,4,4,0
21,5,0,0,,5,5,5,0
22,6,0,0,,6,6,6,0
23,7,0,0,,7,7,7,0
24,8,1,1,,8,8,8,1
25,9,1,1,,9,9,9,1
26,10,1,1,,10,10,10,1
27,11,1,1,,11,11,11,1
28,12,1,1,,12,12,12,1
29,13,1,1,,13,13,13,1
30,14,1,1,,14,14,14,1
31,15,1,1,,15,15,15,1
[root@srvr3320 ~]#

The first column lists the logical CPU number of a CPU as used by the Linux kernel. The second column lists the logical core number - use this information for vCPU pinning.

Ensure Persistent CPU Pinning

CPU pinning ensures that a VM only gets CPU time from a specific CPU or set of CPUs. Pinning is performed on each logical CPU of the guest VM against each core ID in the host system. The CPU pinning information is lost every time the VM instance is shut down or restarted. To avoid entering the pinning information again, update the KVM configuration XML file on the host system.

 Use the following steps to update the pinning information in the KVM configuration XML file:

1. Shut down the VM instance.

2. Start virsh.

   virsh
   [root@kujo ~]# virsh
   Welcome to virsh, the virtualization interactive terminal.
   
   Type:   'help' for help with commands
   		'quit' to quit
   
   virsh  #

3. Edit the VM instance:

   virsh # edit <KVM_instance_name>

4. Search for the vcpu placement attribute.

   

5. Make sure the vCPUs are pinned to the correct NUMA node CPUs.
   Ribbon recommends to reserve the 1-core siblings of each NUMA node for the host process (do not use for the VM). Since the PCI is connected to NUMA node1 (as determined in step step 2.b of NUMA Pinning procedure), you must pin the vCPUs of the VM from the CPU siblings in NUMA node1.

   1. 
      

      Skip the first physical core siblings, 8 and 24, and pin the rest.

      <vcpu placement='static' cpuset='9,25,10,26'>4</vcpu>
      <cputune>
                 <vcpupin vcpu="0" cpuset="9"/>
                 <vcpupin vcpu="1" cpuset="25"/>
                 <vcpupin vcpu="2" cpuset="10"/>
                 <vcpupin vcpu="3" cpuset="26"/>
      </cputune>

      
      As the CPU Architecture Example shows , you must pin the cores to their siblings (i.e. the two Hyperthreads coming from the same physical core). The second column in the example shows the physical core number.

      Note

      Note: As Sub-NUMA Clustering is disabled in the BIOS, each Socket will represent each numa node. So in this case socket 0 is NUMA node0 and Socket 1 is NUMA node1. Make sure that all the vCPUs are pinned to the same NUMA node and don’t cross the NUMA boundary.

      Tip

      Ensure that no two VM instances have the same physical core affinity. For example, if VM1 has an affinity of 9,25,10,26 assigned, then no other VM should be pinned to this core again. To Assign CPU pinning to other VMs, use the other available cores on the host, leaving the first 2 logical cores (as described in Perform Host Pinning) per NUMA node for the host. 

      Also, assign all other VM instances running on the same host with affinity; otherwise the VMs without affinity may impact the performance of VMs that have affinity.

6. Save and exit the XML file.

   :wq

Edit VM CPU Mode

Ribbon recommends to set the CPU mode to host-model using a virsh command in the host system.

Use the following steps to edit the VM CPU mode:

1. Shut down the VM instance.

2. Start virsh.

   virsh

   The virsh prompt displays.
   
   

3. Edit the VM instance:

   edit <KVM_instance_name>

4. Search for the cpu mode attribute.

   

5. Edit the cpu mode attribute:

   

   Tip

   Ensure the topology details entered are identical to the topology details set while creating the VM instance. For example, if the topology was set to 1 socket, 2 cores and 2 threads, enter the same details in this XML file.

6. Save and exit the XML file.

   :wq

7. Start the VM instance.

   start <KVM_instance_name>

Increase the Transmit Queue Length for virt-io Interfaces

This section is applicable only for virt-io based interfaces. Ribbon recommends to increase the transmit queue length of host tap interfaces to 4096 for better performance. By default, the transmit queue length is set to 500. 

To increase the transmit queue length to 4096:

1. Start virsh:

   virsh

   The virsh prompt displays.
   
   

2. Identify the available interfaces.

   domiflist <VM_instance_name>

   The list of active interfaces displays.

   Active Interfaces List

   

3. Increase the transmit queue lengths for the tap interfaces.

   ifconfig <interface_name> txqueuelen <length>

   The interface_name is the name of the interface you want to change, and length is the new queue length. For example, ifconfig macvtap4 txqueuelen 4096.
   
   

4. Verify the value of the interface length.

   ifconfig <interface_name>

   Example output:

   

5. To make this setting persistent across the reboot, do the following:
   

   1. Modify/Create the 60-tap.rules file and add the KERNEL command
      

      # vim /etc/udev/rules.d/60-tap.rules
      KERNEL=="tap*", RUN+="/sbin/ip link set %k txqueuelen 4096" – Add this line
      # udevadm control --reload-rules

   2. Apply the rules to already created interfaces.
      

      # udevadm trigger --attr-match=subsystem=net

      
      

   3. Reboot the host.

Stop Kernel Same-page Metering (KSM)

Kernel same-page metering (KSM) is a technology which finds common memory pages inside a Linux system and merges the pages to save memory resources. In the event of one of the copies being updated, a new copy is created so the function is transparent to the processes on the system. For hypervisors, KSM is highly beneficial when multiple guests are running with the same level of the operating system. However, there is overhead due to the scanning process which may cause the applications to run slower, which is not desirable.

To turn off KSM in the host:

1. Deactivate KSM by stopping the ksmtuned and the ksm services as shown below. This does not persist across reboots.

   # systemctl stop ksm
   # systemctl stopksmtuned

2. Disable KSM persistently as shown below:

   # systemctl disable ksm
   # systemctl disable ksmtuned

Perform Host Pinning

To avoid performance impact on VMs due to host-level Linux services, host pinning isolates physical cores where a guest VM is hosted from physical cores where the Linux host processes/services run. Ribbon recommends to leave one physical core per CPU processor for host processes.

In this example, the core 0 (Core 0 and core 16 are logical cores) and core 8 (Core 8 and core 24 are logical cores) are reserved for Linux host processes.

1. Configure the CPUAffinity option in /etc/systemd/system.conf:

   [root@srvr3320 ~]# lscpu
   Architecture:          x86_64
   CPU op-mode(s):        32-bit, 64-bit
   Byte Order:            Little Endian
   CPU(s):                32
   On-line CPU(s) list:   0-31
   Thread(s) per core:    2
   Core(s) per socket:    8
   Socket(s):             2
   NUMA node(s):          2
   Vendor ID:             GenuineIntel
   CPU family:            6
   Model:                 45
   Model name:            Intel(R) Xeon(R) CPU E5-2658 0 @ 2.10GHz
   Stepping:              7
   CPU MHz:               1782.128
   CPU max MHz:           2100.0000
   CPU min MHz:           1200.0000
   BogoMIPS:              4190.19
   Virtualization:        VT-x
   L1d cache:             32K
   L1i cache:             32K
   L2 cache:              256K
   L3 cache:              20480K
   NUMA node0 CPU(s):     0-7,16-23
   NUMA node1 CPU(s):     8-15,24-31
   

2. To dedicate the physical CPUs 0 and 8 for host processing, specify CPUAffinity as 0 8 16 24 in the file /etc/systemd/system.conf.

   CPUAffinity=0 8 16 24

3. Restart the system.

Using <emulatorpin> Tag

The <emulatorpin> tag specifies to which host physical CPUs the emulator (a subset of a domain, not including vCPUs) is pinned. The <emulatorpin> tag provides a method of setting a precise affinity to emulator thread processes. As a result, vhost threads run on the same subset of physical CPUs and memory, thus benefit from cache locality. 

<cputune>
        <emulatorpin cpuset="11,27"/>
</cputune>

The <emulatorpin> tag is required in order to isolate the virtio network traffic to be pinned to a different core than the VM vCPUs. This greatly reduces the percentage steal seen inside the VMs.

Back Up VMs with 1G hugepages

Ribbon recommends to back up its VMs with 1G hugepages for performance reasons. Configure hugepages in the host during boot time to minimize memory fragmentation. If the host OS does not support the recommendations of 1G hugepage size, configure hugepages of size 2M in place of 1G.

The number of hugepages is decided based on the total memory available on the host. Ribbon recommends to configure 80-90% of total memory as hugepage memory and leave the rest as normal linux memory.

1. Configure the huge page size as 1G and number of huge pages by appending the following line to the kernel command line options in /etc/default/grub. In the example below, the host  has a total of 256G memory, out of which 200G is configured as hugepages. 

   GRUB_TIMEOUT=5
   
   GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
   
   GRUB_DEFAULT=saved
   
   GRUB_DISABLE_SUBMENU=true
   
   GRUB_TERMINAL_OUTPUT="console"
   
   GRUB_CMDLINE_LINUX="console=tty0 console=ttyS0,115200n8 crashkernel=auto intel_iommu=on iommu=pt default_hugepagesz=1GB hugepagesz=1G hugepages=200 rhgb quiet"
   
   GRUB_DISABLE_RECOVERY="true"

2. Regenerate the GRUB2 configuration as shown below: 

   1. If your system uses BIOS firmware, issue the command:

      # grub2-mkconfig -o /boot/grub2/grub.cfg

   2. If your system uses UEFI firmware, issue the command: 

      # grub2-mkconfig -o /boot/efi/EFI/redhat/grub.cfg

3. Add lines in your instance XML file using virsh edit <instanceName>.

   Note

   Make sure that the PCI device (SR-IOV, vCPU and VM memory) comes from the same NUMA node. For virtual pkt interfaces, Also, ensure that the vCPU and memory comes from the same NUMA node.

   <memory unit='KiB'>33554432</memory>
   <currentMemory unit='KiB'>33554432</currentMemory>
   <memoryBacking>
       <hugepages>
   	<page size='1048576' unit='KiB' nodeset='1'/>
       </hugepages>
   </memoryBacking>

   This example pins the VM on NUMA node1. For hosting a second VM on other NUMA node use the proper NUMA node value in the nodeset = <NUMA Node>.

4. Restart the host.
   
   

5. Obtain the PID of the VM:

   ps -eaf | grep qemu | grep -i <vm_name>

6. Verify VM memory is received from a single NUMA node:

   numastat -p  <vmpid>

Disable Flow Control

Perform the following steps to disable flow control.

To disable flow control:

1. Log in to the system as the root user.
   
   

2. Disable flow control for interfaces attached to the SWe VM.

   Tip

   Use the <interface name> from the actual configuration.

   ethtool -A <interface name> rx off tx off autoneg off  

   Example

   ethtool -A p4p3 rx off tx off autoneg off
   ethtool -A p4p4 rx off tx off autoneg off
   ethtool -A em3 rx off tx off autoneg off
   ethtool -A em4 rx off tx off autoneg off

To make the setting persistent:

The network service in CentOS/RedHat has the ability to make the setting persistent. The script /etc/sysconfig/network-scripts/ifup-post checks for the existence of /sbin/ifup-local, and if it exists, runs it with the interface name as a parameter (e.g. /sbin/ifup-local eth0)

Steps:

1. Create this file using touch /sbin/ifup-local
2. Make it executable using chmod +x /sbin/ifup-local
3. Set the file's SELinux context using chcon --reference /sbin/ifup /sbin/ifup-local
4. Open the file in an editor.

Here is an example of a simple script to apply the same settings to all interfaces (except lo):

#!/bin/bash
if [ -n "$1" ]; then
    if [ "$1" != "lo" ];then
        /sbin/ethtool -A $1 rx off tx off autoneg off
    fi
fi

Recap of Changes in the KVM Configuration XML File

Below is an example KVM configuraion XML file that includes all of the above changes. The  highlighted text identifies the changed values, which should be followed properly as described above.

Tune Interrupt Requests (IRQs)

This section applies only to virt-io-based packet interfaces. Virt-IO networking works by sending interrupts on the host core. SBC VM performance can be impacted if frequent processing interruptions occur on any core of the VM. To avoid this, the affinity of the IRQs for a virtio-based packet interface should be different from the cores assigned to the SBC VM.

The /proc/interrupts file lists the number of interrupts per CPU, per I/O device. IRQs have an associated "affinity" property, "smp_affinity," that defines which CPU cores are allowed to run the interrupt service routine (ISR) for that IRQ. Refer to the distribution guidelines of the host OS for the exact steps to locate and specify the IRQ affinity settings for a device.

External Reference: https://access.redhat.com/solutions/2144921