Project

General

Profile

Feature #9237

Add jail cpu/memory limit capability

Added by Phil Hess almost 6 years ago. Updated over 3 years ago.

Status:
Closed: Not To Be Fixed
Priority:
Nice to have
Assignee:
John Hixson
Category:
Middleware
Target version:
Estimated time:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:

Description

Jails are one of the best things about FreeNAS! However, we all have jails that can sometimes become memory intensive for whatever reason and bring the system to a crawl. It's also a clear way to degradate a FreeNAS box should a jail ever be hacked and set to eat up all memory and cpu resources.

I wish to request a feature be added to the jails configuration screen to allow customers the ability to set limits on a jails memory and resources. This will probably need an additional feature to enable 'rctl' and/or a concurrence among the team to enable this by default.

Benfits: - ability to strap a jails resource down to avoid a jail degradating FreeNAS or a creating a denial of service situation.

History

#1 Updated by Phil Hess almost 6 years ago

Meant to list cpu as primary resource to provide an ability to limit on a jail and memory being the 2nd most needing an ability to set limits on.

#2 Updated by Jordan Hubbard almost 6 years ago

  • Category set to 38
  • Assignee set to John Hixson
  • Target version set to 49

Hmmm. I was about to yell "inconceivable!" on this one, but it looks like it's actually possible using rctl or something (https://www.freebsd.org/doc/handbook/security-resourcelimits.html). Never tried it though.

#3 Updated by John Hixson almost 6 years ago

  • Status changed from Unscreened to Screened

#4 Updated by Phil Hess almost 6 years ago

Thanks a bunch for adopting this for future release John!

Another options besides using rctl for placing limitations is "ezjail" port. Here's a link where bsdnow.tv talks about using ezjail:

http://www.bsdnow.tv/tutorials/jails

#5 Updated by Jordan Hubbard over 5 years ago

  • Status changed from Screened to Closed: Not To Be Fixed

#6 Avatar?id=14398&size=24x24 Updated by Kris Moore over 3 years ago

  • Target version changed from 49 to N/A

Also available in: Atom PDF