Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 1 | /* |
| 2 | * VMware Balloon driver. |
| 3 | * |
| 4 | * Copyright (C) 2000-2010, VMware, Inc. All Rights Reserved. |
| 5 | * |
| 6 | * This program is free software; you can redistribute it and/or modify it |
| 7 | * under the terms of the GNU General Public License as published by the |
| 8 | * Free Software Foundation; version 2 of the License and no later version. |
| 9 | * |
| 10 | * This program is distributed in the hope that it will be useful, but |
| 11 | * WITHOUT ANY WARRANTY; without even the implied warranty of |
| 12 | * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, GOOD TITLE or |
| 13 | * NON INFRINGEMENT. See the GNU General Public License for more |
| 14 | * details. |
| 15 | * |
| 16 | * You should have received a copy of the GNU General Public License |
| 17 | * along with this program; if not, write to the Free Software |
| 18 | * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
| 19 | * |
| 20 | * Maintained by: Dmitry Torokhov <dtor@vmware.com> |
| 21 | */ |
| 22 | |
| 23 | /* |
| 24 | * This is VMware physical memory management driver for Linux. The driver |
| 25 | * acts like a "balloon" that can be inflated to reclaim physical pages by |
| 26 | * reserving them in the guest and invalidating them in the monitor, |
| 27 | * freeing up the underlying machine pages so they can be allocated to |
| 28 | * other guests. The balloon can also be deflated to allow the guest to |
| 29 | * use more physical memory. Higher level policies can control the sizes |
| 30 | * of balloons in VMs in order to manage physical memory resources. |
| 31 | */ |
| 32 | |
| 33 | //#define DEBUG |
| 34 | #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt |
| 35 | |
| 36 | #include <linux/types.h> |
| 37 | #include <linux/kernel.h> |
| 38 | #include <linux/mm.h> |
| 39 | #include <linux/sched.h> |
| 40 | #include <linux/module.h> |
| 41 | #include <linux/workqueue.h> |
| 42 | #include <linux/debugfs.h> |
| 43 | #include <linux/seq_file.h> |
H. Peter Anvin | a10a569 | 2010-05-09 01:13:42 -0700 | [diff] [blame] | 44 | #include <asm/hypervisor.h> |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 45 | |
| 46 | MODULE_AUTHOR("VMware, Inc."); |
| 47 | MODULE_DESCRIPTION("VMware Memory Control (Balloon) Driver"); |
Dmitry Torokhov | 55adaa4 | 2010-06-04 14:14:52 -0700 | [diff] [blame^] | 48 | MODULE_VERSION("1.2.1.1-k"); |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 49 | MODULE_ALIAS("dmi:*:svnVMware*:*"); |
| 50 | MODULE_ALIAS("vmware_vmmemctl"); |
| 51 | MODULE_LICENSE("GPL"); |
| 52 | |
| 53 | /* |
| 54 | * Various constants controlling rate of inflaint/deflating balloon, |
| 55 | * measured in pages. |
| 56 | */ |
| 57 | |
| 58 | /* |
| 59 | * Rate of allocating memory when there is no memory pressure |
| 60 | * (driver performs non-sleeping allocations). |
| 61 | */ |
| 62 | #define VMW_BALLOON_NOSLEEP_ALLOC_MAX 16384U |
| 63 | |
| 64 | /* |
| 65 | * Rates of memory allocaton when guest experiences memory pressure |
| 66 | * (driver performs sleeping allocations). |
| 67 | */ |
| 68 | #define VMW_BALLOON_RATE_ALLOC_MIN 512U |
| 69 | #define VMW_BALLOON_RATE_ALLOC_MAX 2048U |
| 70 | #define VMW_BALLOON_RATE_ALLOC_INC 16U |
| 71 | |
| 72 | /* |
| 73 | * Rates for releasing pages while deflating balloon. |
| 74 | */ |
| 75 | #define VMW_BALLOON_RATE_FREE_MIN 512U |
| 76 | #define VMW_BALLOON_RATE_FREE_MAX 16384U |
| 77 | #define VMW_BALLOON_RATE_FREE_INC 16U |
| 78 | |
| 79 | /* |
| 80 | * When guest is under memory pressure, use a reduced page allocation |
| 81 | * rate for next several cycles. |
| 82 | */ |
| 83 | #define VMW_BALLOON_SLOW_CYCLES 4 |
| 84 | |
| 85 | /* |
| 86 | * Use __GFP_HIGHMEM to allow pages from HIGHMEM zone. We don't |
| 87 | * allow wait (__GFP_WAIT) for NOSLEEP page allocations. Use |
| 88 | * __GFP_NOWARN, to suppress page allocation failure warnings. |
| 89 | */ |
| 90 | #define VMW_PAGE_ALLOC_NOSLEEP (__GFP_HIGHMEM|__GFP_NOWARN) |
| 91 | |
| 92 | /* |
| 93 | * Use GFP_HIGHUSER when executing in a separate kernel thread |
| 94 | * context and allocation can sleep. This is less stressful to |
| 95 | * the guest memory system, since it allows the thread to block |
| 96 | * while memory is reclaimed, and won't take pages from emergency |
| 97 | * low-memory pools. |
| 98 | */ |
| 99 | #define VMW_PAGE_ALLOC_CANSLEEP (GFP_HIGHUSER) |
| 100 | |
| 101 | /* Maximum number of page allocations without yielding processor */ |
| 102 | #define VMW_BALLOON_YIELD_THRESHOLD 1024 |
| 103 | |
Dmitry Torokhov | 55adaa4 | 2010-06-04 14:14:52 -0700 | [diff] [blame^] | 104 | /* Maximum number of refused pages we accumulate during inflation cycle */ |
| 105 | #define VMW_BALLOON_MAX_REFUSED 16 |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 106 | |
| 107 | /* |
| 108 | * Hypervisor communication port definitions. |
| 109 | */ |
| 110 | #define VMW_BALLOON_HV_PORT 0x5670 |
| 111 | #define VMW_BALLOON_HV_MAGIC 0x456c6d6f |
| 112 | #define VMW_BALLOON_PROTOCOL_VERSION 2 |
| 113 | #define VMW_BALLOON_GUEST_ID 1 /* Linux */ |
| 114 | |
| 115 | #define VMW_BALLOON_CMD_START 0 |
| 116 | #define VMW_BALLOON_CMD_GET_TARGET 1 |
| 117 | #define VMW_BALLOON_CMD_LOCK 2 |
| 118 | #define VMW_BALLOON_CMD_UNLOCK 3 |
| 119 | #define VMW_BALLOON_CMD_GUEST_ID 4 |
| 120 | |
| 121 | /* error codes */ |
| 122 | #define VMW_BALLOON_SUCCESS 0 |
| 123 | #define VMW_BALLOON_FAILURE -1 |
| 124 | #define VMW_BALLOON_ERROR_CMD_INVALID 1 |
| 125 | #define VMW_BALLOON_ERROR_PPN_INVALID 2 |
| 126 | #define VMW_BALLOON_ERROR_PPN_LOCKED 3 |
| 127 | #define VMW_BALLOON_ERROR_PPN_UNLOCKED 4 |
| 128 | #define VMW_BALLOON_ERROR_PPN_PINNED 5 |
| 129 | #define VMW_BALLOON_ERROR_PPN_NOTNEEDED 6 |
| 130 | #define VMW_BALLOON_ERROR_RESET 7 |
| 131 | #define VMW_BALLOON_ERROR_BUSY 8 |
| 132 | |
| 133 | #define VMWARE_BALLOON_CMD(cmd, data, result) \ |
| 134 | ({ \ |
| 135 | unsigned long __stat, __dummy1, __dummy2; \ |
| 136 | __asm__ __volatile__ ("inl (%%dx)" : \ |
| 137 | "=a"(__stat), \ |
| 138 | "=c"(__dummy1), \ |
| 139 | "=d"(__dummy2), \ |
| 140 | "=b"(result) : \ |
| 141 | "0"(VMW_BALLOON_HV_MAGIC), \ |
| 142 | "1"(VMW_BALLOON_CMD_##cmd), \ |
| 143 | "2"(VMW_BALLOON_HV_PORT), \ |
| 144 | "3"(data) : \ |
| 145 | "memory"); \ |
| 146 | result &= -1UL; \ |
| 147 | __stat & -1UL; \ |
| 148 | }) |
| 149 | |
| 150 | #ifdef CONFIG_DEBUG_FS |
| 151 | struct vmballoon_stats { |
| 152 | unsigned int timer; |
| 153 | |
| 154 | /* allocation statustics */ |
| 155 | unsigned int alloc; |
| 156 | unsigned int alloc_fail; |
| 157 | unsigned int sleep_alloc; |
| 158 | unsigned int sleep_alloc_fail; |
| 159 | unsigned int refused_alloc; |
| 160 | unsigned int refused_free; |
| 161 | unsigned int free; |
| 162 | |
| 163 | /* monitor operations */ |
| 164 | unsigned int lock; |
| 165 | unsigned int lock_fail; |
| 166 | unsigned int unlock; |
| 167 | unsigned int unlock_fail; |
| 168 | unsigned int target; |
| 169 | unsigned int target_fail; |
| 170 | unsigned int start; |
| 171 | unsigned int start_fail; |
| 172 | unsigned int guest_type; |
| 173 | unsigned int guest_type_fail; |
| 174 | }; |
| 175 | |
| 176 | #define STATS_INC(stat) (stat)++ |
| 177 | #else |
| 178 | #define STATS_INC(stat) |
| 179 | #endif |
| 180 | |
| 181 | struct vmballoon { |
| 182 | |
| 183 | /* list of reserved physical pages */ |
| 184 | struct list_head pages; |
| 185 | |
| 186 | /* transient list of non-balloonable pages */ |
| 187 | struct list_head refused_pages; |
Dmitry Torokhov | 55adaa4 | 2010-06-04 14:14:52 -0700 | [diff] [blame^] | 188 | unsigned int n_refused_pages; |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 189 | |
| 190 | /* balloon size in pages */ |
| 191 | unsigned int size; |
| 192 | unsigned int target; |
| 193 | |
| 194 | /* reset flag */ |
| 195 | bool reset_required; |
| 196 | |
| 197 | /* adjustment rates (pages per second) */ |
| 198 | unsigned int rate_alloc; |
| 199 | unsigned int rate_free; |
| 200 | |
| 201 | /* slowdown page allocations for next few cycles */ |
| 202 | unsigned int slow_allocation_cycles; |
| 203 | |
| 204 | #ifdef CONFIG_DEBUG_FS |
| 205 | /* statistics */ |
| 206 | struct vmballoon_stats stats; |
| 207 | |
| 208 | /* debugfs file exporting statistics */ |
| 209 | struct dentry *dbg_entry; |
| 210 | #endif |
| 211 | |
| 212 | struct sysinfo sysinfo; |
| 213 | |
| 214 | struct delayed_work dwork; |
| 215 | }; |
| 216 | |
| 217 | static struct vmballoon balloon; |
| 218 | static struct workqueue_struct *vmballoon_wq; |
| 219 | |
| 220 | /* |
| 221 | * Send "start" command to the host, communicating supported version |
| 222 | * of the protocol. |
| 223 | */ |
| 224 | static bool vmballoon_send_start(struct vmballoon *b) |
| 225 | { |
| 226 | unsigned long status, dummy; |
| 227 | |
| 228 | STATS_INC(b->stats.start); |
| 229 | |
| 230 | status = VMWARE_BALLOON_CMD(START, VMW_BALLOON_PROTOCOL_VERSION, dummy); |
| 231 | if (status == VMW_BALLOON_SUCCESS) |
| 232 | return true; |
| 233 | |
| 234 | pr_debug("%s - failed, hv returns %ld\n", __func__, status); |
| 235 | STATS_INC(b->stats.start_fail); |
| 236 | return false; |
| 237 | } |
| 238 | |
| 239 | static bool vmballoon_check_status(struct vmballoon *b, unsigned long status) |
| 240 | { |
| 241 | switch (status) { |
| 242 | case VMW_BALLOON_SUCCESS: |
| 243 | return true; |
| 244 | |
| 245 | case VMW_BALLOON_ERROR_RESET: |
| 246 | b->reset_required = true; |
| 247 | /* fall through */ |
| 248 | |
| 249 | default: |
| 250 | return false; |
| 251 | } |
| 252 | } |
| 253 | |
| 254 | /* |
| 255 | * Communicate guest type to the host so that it can adjust ballooning |
| 256 | * algorithm to the one most appropriate for the guest. This command |
| 257 | * is normally issued after sending "start" command and is part of |
| 258 | * standard reset sequence. |
| 259 | */ |
| 260 | static bool vmballoon_send_guest_id(struct vmballoon *b) |
| 261 | { |
| 262 | unsigned long status, dummy; |
| 263 | |
| 264 | status = VMWARE_BALLOON_CMD(GUEST_ID, VMW_BALLOON_GUEST_ID, dummy); |
| 265 | |
| 266 | STATS_INC(b->stats.guest_type); |
| 267 | |
| 268 | if (vmballoon_check_status(b, status)) |
| 269 | return true; |
| 270 | |
| 271 | pr_debug("%s - failed, hv returns %ld\n", __func__, status); |
| 272 | STATS_INC(b->stats.guest_type_fail); |
| 273 | return false; |
| 274 | } |
| 275 | |
| 276 | /* |
| 277 | * Retrieve desired balloon size from the host. |
| 278 | */ |
| 279 | static bool vmballoon_send_get_target(struct vmballoon *b, u32 *new_target) |
| 280 | { |
| 281 | unsigned long status; |
| 282 | unsigned long target; |
| 283 | unsigned long limit; |
| 284 | u32 limit32; |
| 285 | |
| 286 | /* |
| 287 | * si_meminfo() is cheap. Moreover, we want to provide dynamic |
| 288 | * max balloon size later. So let us call si_meminfo() every |
| 289 | * iteration. |
| 290 | */ |
| 291 | si_meminfo(&b->sysinfo); |
| 292 | limit = b->sysinfo.totalram; |
| 293 | |
| 294 | /* Ensure limit fits in 32-bits */ |
| 295 | limit32 = (u32)limit; |
| 296 | if (limit != limit32) |
| 297 | return false; |
| 298 | |
| 299 | /* update stats */ |
| 300 | STATS_INC(b->stats.target); |
| 301 | |
| 302 | status = VMWARE_BALLOON_CMD(GET_TARGET, limit, target); |
| 303 | if (vmballoon_check_status(b, status)) { |
| 304 | *new_target = target; |
| 305 | return true; |
| 306 | } |
| 307 | |
| 308 | pr_debug("%s - failed, hv returns %ld\n", __func__, status); |
| 309 | STATS_INC(b->stats.target_fail); |
| 310 | return false; |
| 311 | } |
| 312 | |
| 313 | /* |
| 314 | * Notify the host about allocated page so that host can use it without |
| 315 | * fear that guest will need it. Host may reject some pages, we need to |
| 316 | * check the return value and maybe submit a different page. |
| 317 | */ |
| 318 | static bool vmballoon_send_lock_page(struct vmballoon *b, unsigned long pfn) |
| 319 | { |
| 320 | unsigned long status, dummy; |
| 321 | u32 pfn32; |
| 322 | |
| 323 | pfn32 = (u32)pfn; |
| 324 | if (pfn32 != pfn) |
| 325 | return false; |
| 326 | |
| 327 | STATS_INC(b->stats.lock); |
| 328 | |
| 329 | status = VMWARE_BALLOON_CMD(LOCK, pfn, dummy); |
| 330 | if (vmballoon_check_status(b, status)) |
| 331 | return true; |
| 332 | |
| 333 | pr_debug("%s - ppn %lx, hv returns %ld\n", __func__, pfn, status); |
| 334 | STATS_INC(b->stats.lock_fail); |
| 335 | return false; |
| 336 | } |
| 337 | |
| 338 | /* |
| 339 | * Notify the host that guest intends to release given page back into |
| 340 | * the pool of available (to the guest) pages. |
| 341 | */ |
| 342 | static bool vmballoon_send_unlock_page(struct vmballoon *b, unsigned long pfn) |
| 343 | { |
| 344 | unsigned long status, dummy; |
| 345 | u32 pfn32; |
| 346 | |
| 347 | pfn32 = (u32)pfn; |
| 348 | if (pfn32 != pfn) |
| 349 | return false; |
| 350 | |
| 351 | STATS_INC(b->stats.unlock); |
| 352 | |
| 353 | status = VMWARE_BALLOON_CMD(UNLOCK, pfn, dummy); |
| 354 | if (vmballoon_check_status(b, status)) |
| 355 | return true; |
| 356 | |
| 357 | pr_debug("%s - ppn %lx, hv returns %ld\n", __func__, pfn, status); |
| 358 | STATS_INC(b->stats.unlock_fail); |
| 359 | return false; |
| 360 | } |
| 361 | |
| 362 | /* |
| 363 | * Quickly release all pages allocated for the balloon. This function is |
| 364 | * called when host decides to "reset" balloon for one reason or another. |
| 365 | * Unlike normal "deflate" we do not (shall not) notify host of the pages |
| 366 | * being released. |
| 367 | */ |
| 368 | static void vmballoon_pop(struct vmballoon *b) |
| 369 | { |
| 370 | struct page *page, *next; |
| 371 | unsigned int count = 0; |
| 372 | |
| 373 | list_for_each_entry_safe(page, next, &b->pages, lru) { |
| 374 | list_del(&page->lru); |
| 375 | __free_page(page); |
| 376 | STATS_INC(b->stats.free); |
| 377 | b->size--; |
| 378 | |
| 379 | if (++count >= b->rate_free) { |
| 380 | count = 0; |
| 381 | cond_resched(); |
| 382 | } |
| 383 | } |
| 384 | } |
| 385 | |
| 386 | /* |
| 387 | * Perform standard reset sequence by popping the balloon (in case it |
| 388 | * is not empty) and then restarting protocol. This operation normally |
| 389 | * happens when host responds with VMW_BALLOON_ERROR_RESET to a command. |
| 390 | */ |
| 391 | static void vmballoon_reset(struct vmballoon *b) |
| 392 | { |
| 393 | /* free all pages, skipping monitor unlock */ |
| 394 | vmballoon_pop(b); |
| 395 | |
| 396 | if (vmballoon_send_start(b)) { |
| 397 | b->reset_required = false; |
| 398 | if (!vmballoon_send_guest_id(b)) |
| 399 | pr_err("failed to send guest ID to the host\n"); |
| 400 | } |
| 401 | } |
| 402 | |
| 403 | /* |
| 404 | * Allocate (or reserve) a page for the balloon and notify the host. If host |
| 405 | * refuses the page put it on "refuse" list and allocate another one until host |
| 406 | * is satisfied. "Refused" pages are released at the end of inflation cycle |
| 407 | * (when we allocate b->rate_alloc pages). |
| 408 | */ |
| 409 | static int vmballoon_reserve_page(struct vmballoon *b, bool can_sleep) |
| 410 | { |
| 411 | struct page *page; |
| 412 | gfp_t flags; |
| 413 | bool locked = false; |
| 414 | |
| 415 | do { |
| 416 | if (!can_sleep) |
| 417 | STATS_INC(b->stats.alloc); |
| 418 | else |
| 419 | STATS_INC(b->stats.sleep_alloc); |
| 420 | |
| 421 | flags = can_sleep ? VMW_PAGE_ALLOC_CANSLEEP : VMW_PAGE_ALLOC_NOSLEEP; |
| 422 | page = alloc_page(flags); |
| 423 | if (!page) { |
| 424 | if (!can_sleep) |
| 425 | STATS_INC(b->stats.alloc_fail); |
| 426 | else |
| 427 | STATS_INC(b->stats.sleep_alloc_fail); |
| 428 | return -ENOMEM; |
| 429 | } |
| 430 | |
| 431 | /* inform monitor */ |
| 432 | locked = vmballoon_send_lock_page(b, page_to_pfn(page)); |
| 433 | if (!locked) { |
Dmitry Torokhov | 55adaa4 | 2010-06-04 14:14:52 -0700 | [diff] [blame^] | 434 | STATS_INC(b->stats.refused_alloc); |
| 435 | |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 436 | if (b->reset_required) { |
| 437 | __free_page(page); |
| 438 | return -EIO; |
| 439 | } |
| 440 | |
Dmitry Torokhov | 55adaa4 | 2010-06-04 14:14:52 -0700 | [diff] [blame^] | 441 | /* |
| 442 | * Place page on the list of non-balloonable pages |
| 443 | * and retry allocation, unless we already accumulated |
| 444 | * too many of them, in which case take a breather. |
| 445 | */ |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 446 | list_add(&page->lru, &b->refused_pages); |
Dmitry Torokhov | 55adaa4 | 2010-06-04 14:14:52 -0700 | [diff] [blame^] | 447 | if (++b->n_refused_pages >= VMW_BALLOON_MAX_REFUSED) |
| 448 | return -EIO; |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 449 | } |
| 450 | } while (!locked); |
| 451 | |
| 452 | /* track allocated page */ |
| 453 | list_add(&page->lru, &b->pages); |
| 454 | |
| 455 | /* update balloon size */ |
| 456 | b->size++; |
| 457 | |
| 458 | return 0; |
| 459 | } |
| 460 | |
| 461 | /* |
| 462 | * Release the page allocated for the balloon. Note that we first notify |
| 463 | * the host so it can make sure the page will be available for the guest |
| 464 | * to use, if needed. |
| 465 | */ |
| 466 | static int vmballoon_release_page(struct vmballoon *b, struct page *page) |
| 467 | { |
| 468 | if (!vmballoon_send_unlock_page(b, page_to_pfn(page))) |
| 469 | return -EIO; |
| 470 | |
| 471 | list_del(&page->lru); |
| 472 | |
| 473 | /* deallocate page */ |
| 474 | __free_page(page); |
| 475 | STATS_INC(b->stats.free); |
| 476 | |
| 477 | /* update balloon size */ |
| 478 | b->size--; |
| 479 | |
| 480 | return 0; |
| 481 | } |
| 482 | |
| 483 | /* |
| 484 | * Release pages that were allocated while attempting to inflate the |
| 485 | * balloon but were refused by the host for one reason or another. |
| 486 | */ |
| 487 | static void vmballoon_release_refused_pages(struct vmballoon *b) |
| 488 | { |
| 489 | struct page *page, *next; |
| 490 | |
| 491 | list_for_each_entry_safe(page, next, &b->refused_pages, lru) { |
| 492 | list_del(&page->lru); |
| 493 | __free_page(page); |
| 494 | STATS_INC(b->stats.refused_free); |
| 495 | } |
Dmitry Torokhov | 55adaa4 | 2010-06-04 14:14:52 -0700 | [diff] [blame^] | 496 | |
| 497 | b->n_refused_pages = 0; |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 498 | } |
| 499 | |
| 500 | /* |
| 501 | * Inflate the balloon towards its target size. Note that we try to limit |
| 502 | * the rate of allocation to make sure we are not choking the rest of the |
| 503 | * system. |
| 504 | */ |
| 505 | static void vmballoon_inflate(struct vmballoon *b) |
| 506 | { |
| 507 | unsigned int goal; |
| 508 | unsigned int rate; |
| 509 | unsigned int i; |
| 510 | unsigned int allocations = 0; |
| 511 | int error = 0; |
| 512 | bool alloc_can_sleep = false; |
| 513 | |
| 514 | pr_debug("%s - size: %d, target %d\n", __func__, b->size, b->target); |
| 515 | |
| 516 | /* |
| 517 | * First try NOSLEEP page allocations to inflate balloon. |
| 518 | * |
| 519 | * If we do not throttle nosleep allocations, we can drain all |
| 520 | * free pages in the guest quickly (if the balloon target is high). |
| 521 | * As a side-effect, draining free pages helps to inform (force) |
| 522 | * the guest to start swapping if balloon target is not met yet, |
| 523 | * which is a desired behavior. However, balloon driver can consume |
| 524 | * all available CPU cycles if too many pages are allocated in a |
| 525 | * second. Therefore, we throttle nosleep allocations even when |
| 526 | * the guest is not under memory pressure. OTOH, if we have already |
| 527 | * predicted that the guest is under memory pressure, then we |
| 528 | * slowdown page allocations considerably. |
| 529 | */ |
| 530 | |
| 531 | goal = b->target - b->size; |
| 532 | /* |
| 533 | * Start with no sleep allocation rate which may be higher |
| 534 | * than sleeping allocation rate. |
| 535 | */ |
| 536 | rate = b->slow_allocation_cycles ? |
| 537 | b->rate_alloc : VMW_BALLOON_NOSLEEP_ALLOC_MAX; |
| 538 | |
| 539 | pr_debug("%s - goal: %d, no-sleep rate: %d, sleep rate: %d\n", |
| 540 | __func__, goal, rate, b->rate_alloc); |
| 541 | |
| 542 | for (i = 0; i < goal; i++) { |
| 543 | |
| 544 | error = vmballoon_reserve_page(b, alloc_can_sleep); |
| 545 | if (error) { |
| 546 | if (error != -ENOMEM) { |
| 547 | /* |
| 548 | * Not a page allocation failure, stop this |
| 549 | * cycle. Maybe we'll get new target from |
| 550 | * the host soon. |
| 551 | */ |
| 552 | break; |
| 553 | } |
| 554 | |
| 555 | if (alloc_can_sleep) { |
| 556 | /* |
| 557 | * CANSLEEP page allocation failed, so guest |
| 558 | * is under severe memory pressure. Quickly |
| 559 | * decrease allocation rate. |
| 560 | */ |
| 561 | b->rate_alloc = max(b->rate_alloc / 2, |
| 562 | VMW_BALLOON_RATE_ALLOC_MIN); |
| 563 | break; |
| 564 | } |
| 565 | |
| 566 | /* |
| 567 | * NOSLEEP page allocation failed, so the guest is |
| 568 | * under memory pressure. Let us slow down page |
| 569 | * allocations for next few cycles so that the guest |
| 570 | * gets out of memory pressure. Also, if we already |
| 571 | * allocated b->rate_alloc pages, let's pause, |
| 572 | * otherwise switch to sleeping allocations. |
| 573 | */ |
| 574 | b->slow_allocation_cycles = VMW_BALLOON_SLOW_CYCLES; |
| 575 | |
| 576 | if (i >= b->rate_alloc) |
| 577 | break; |
| 578 | |
| 579 | alloc_can_sleep = true; |
| 580 | /* Lower rate for sleeping allocations. */ |
| 581 | rate = b->rate_alloc; |
| 582 | } |
| 583 | |
| 584 | if (++allocations > VMW_BALLOON_YIELD_THRESHOLD) { |
| 585 | cond_resched(); |
| 586 | allocations = 0; |
| 587 | } |
| 588 | |
| 589 | if (i >= rate) { |
| 590 | /* We allocated enough pages, let's take a break. */ |
| 591 | break; |
| 592 | } |
| 593 | } |
| 594 | |
| 595 | /* |
| 596 | * We reached our goal without failures so try increasing |
| 597 | * allocation rate. |
| 598 | */ |
| 599 | if (error == 0 && i >= b->rate_alloc) { |
| 600 | unsigned int mult = i / b->rate_alloc; |
| 601 | |
| 602 | b->rate_alloc = |
| 603 | min(b->rate_alloc + mult * VMW_BALLOON_RATE_ALLOC_INC, |
| 604 | VMW_BALLOON_RATE_ALLOC_MAX); |
| 605 | } |
| 606 | |
| 607 | vmballoon_release_refused_pages(b); |
| 608 | } |
| 609 | |
| 610 | /* |
| 611 | * Decrease the size of the balloon allowing guest to use more memory. |
| 612 | */ |
| 613 | static void vmballoon_deflate(struct vmballoon *b) |
| 614 | { |
| 615 | struct page *page, *next; |
| 616 | unsigned int i = 0; |
| 617 | unsigned int goal; |
| 618 | int error; |
| 619 | |
| 620 | pr_debug("%s - size: %d, target %d\n", __func__, b->size, b->target); |
| 621 | |
| 622 | /* limit deallocation rate */ |
| 623 | goal = min(b->size - b->target, b->rate_free); |
| 624 | |
| 625 | pr_debug("%s - goal: %d, rate: %d\n", __func__, goal, b->rate_free); |
| 626 | |
| 627 | /* free pages to reach target */ |
| 628 | list_for_each_entry_safe(page, next, &b->pages, lru) { |
| 629 | error = vmballoon_release_page(b, page); |
| 630 | if (error) { |
| 631 | /* quickly decrease rate in case of error */ |
| 632 | b->rate_free = max(b->rate_free / 2, |
| 633 | VMW_BALLOON_RATE_FREE_MIN); |
| 634 | return; |
| 635 | } |
| 636 | |
| 637 | if (++i >= goal) |
| 638 | break; |
| 639 | } |
| 640 | |
| 641 | /* slowly increase rate if there were no errors */ |
| 642 | b->rate_free = min(b->rate_free + VMW_BALLOON_RATE_FREE_INC, |
| 643 | VMW_BALLOON_RATE_FREE_MAX); |
| 644 | } |
| 645 | |
| 646 | /* |
| 647 | * Balloon work function: reset protocol, if needed, get the new size and |
| 648 | * adjust balloon as needed. Repeat in 1 sec. |
| 649 | */ |
| 650 | static void vmballoon_work(struct work_struct *work) |
| 651 | { |
| 652 | struct delayed_work *dwork = to_delayed_work(work); |
| 653 | struct vmballoon *b = container_of(dwork, struct vmballoon, dwork); |
| 654 | unsigned int target; |
| 655 | |
| 656 | STATS_INC(b->stats.timer); |
| 657 | |
| 658 | if (b->reset_required) |
| 659 | vmballoon_reset(b); |
| 660 | |
| 661 | if (b->slow_allocation_cycles > 0) |
| 662 | b->slow_allocation_cycles--; |
| 663 | |
| 664 | if (vmballoon_send_get_target(b, &target)) { |
| 665 | /* update target, adjust size */ |
| 666 | b->target = target; |
| 667 | |
| 668 | if (b->size < target) |
| 669 | vmballoon_inflate(b); |
| 670 | else if (b->size > target) |
| 671 | vmballoon_deflate(b); |
| 672 | } |
| 673 | |
| 674 | queue_delayed_work(vmballoon_wq, dwork, round_jiffies_relative(HZ)); |
| 675 | } |
| 676 | |
| 677 | /* |
| 678 | * DEBUGFS Interface |
| 679 | */ |
| 680 | #ifdef CONFIG_DEBUG_FS |
| 681 | |
| 682 | static int vmballoon_debug_show(struct seq_file *f, void *offset) |
| 683 | { |
| 684 | struct vmballoon *b = f->private; |
| 685 | struct vmballoon_stats *stats = &b->stats; |
| 686 | |
| 687 | /* format size info */ |
| 688 | seq_printf(f, |
| 689 | "target: %8d pages\n" |
| 690 | "current: %8d pages\n", |
| 691 | b->target, b->size); |
| 692 | |
| 693 | /* format rate info */ |
| 694 | seq_printf(f, |
| 695 | "rateNoSleepAlloc: %8d pages/sec\n" |
| 696 | "rateSleepAlloc: %8d pages/sec\n" |
| 697 | "rateFree: %8d pages/sec\n", |
| 698 | VMW_BALLOON_NOSLEEP_ALLOC_MAX, |
| 699 | b->rate_alloc, b->rate_free); |
| 700 | |
| 701 | seq_printf(f, |
| 702 | "\n" |
| 703 | "timer: %8u\n" |
| 704 | "start: %8u (%4u failed)\n" |
| 705 | "guestType: %8u (%4u failed)\n" |
| 706 | "lock: %8u (%4u failed)\n" |
| 707 | "unlock: %8u (%4u failed)\n" |
| 708 | "target: %8u (%4u failed)\n" |
| 709 | "primNoSleepAlloc: %8u (%4u failed)\n" |
| 710 | "primCanSleepAlloc: %8u (%4u failed)\n" |
| 711 | "primFree: %8u\n" |
| 712 | "errAlloc: %8u\n" |
| 713 | "errFree: %8u\n", |
| 714 | stats->timer, |
| 715 | stats->start, stats->start_fail, |
| 716 | stats->guest_type, stats->guest_type_fail, |
| 717 | stats->lock, stats->lock_fail, |
| 718 | stats->unlock, stats->unlock_fail, |
| 719 | stats->target, stats->target_fail, |
| 720 | stats->alloc, stats->alloc_fail, |
| 721 | stats->sleep_alloc, stats->sleep_alloc_fail, |
| 722 | stats->free, |
| 723 | stats->refused_alloc, stats->refused_free); |
| 724 | |
| 725 | return 0; |
| 726 | } |
| 727 | |
| 728 | static int vmballoon_debug_open(struct inode *inode, struct file *file) |
| 729 | { |
| 730 | return single_open(file, vmballoon_debug_show, inode->i_private); |
| 731 | } |
| 732 | |
| 733 | static const struct file_operations vmballoon_debug_fops = { |
| 734 | .owner = THIS_MODULE, |
| 735 | .open = vmballoon_debug_open, |
| 736 | .read = seq_read, |
| 737 | .llseek = seq_lseek, |
| 738 | .release = single_release, |
| 739 | }; |
| 740 | |
| 741 | static int __init vmballoon_debugfs_init(struct vmballoon *b) |
| 742 | { |
| 743 | int error; |
| 744 | |
| 745 | b->dbg_entry = debugfs_create_file("vmmemctl", S_IRUGO, NULL, b, |
| 746 | &vmballoon_debug_fops); |
| 747 | if (IS_ERR(b->dbg_entry)) { |
| 748 | error = PTR_ERR(b->dbg_entry); |
| 749 | pr_err("failed to create debugfs entry, error: %d\n", error); |
| 750 | return error; |
| 751 | } |
| 752 | |
| 753 | return 0; |
| 754 | } |
| 755 | |
| 756 | static void __exit vmballoon_debugfs_exit(struct vmballoon *b) |
| 757 | { |
| 758 | debugfs_remove(b->dbg_entry); |
| 759 | } |
| 760 | |
| 761 | #else |
| 762 | |
| 763 | static inline int vmballoon_debugfs_init(struct vmballoon *b) |
| 764 | { |
| 765 | return 0; |
| 766 | } |
| 767 | |
| 768 | static inline void vmballoon_debugfs_exit(struct vmballoon *b) |
| 769 | { |
| 770 | } |
| 771 | |
| 772 | #endif /* CONFIG_DEBUG_FS */ |
| 773 | |
| 774 | static int __init vmballoon_init(void) |
| 775 | { |
| 776 | int error; |
| 777 | |
| 778 | /* |
| 779 | * Check if we are running on VMware's hypervisor and bail out |
| 780 | * if we are not. |
| 781 | */ |
H. Peter Anvin | a10a569 | 2010-05-09 01:13:42 -0700 | [diff] [blame] | 782 | if (x86_hyper != &x86_hyper_vmware) |
Dmitry Torokhov | 453dc65 | 2010-04-23 13:18:08 -0400 | [diff] [blame] | 783 | return -ENODEV; |
| 784 | |
| 785 | vmballoon_wq = create_freezeable_workqueue("vmmemctl"); |
| 786 | if (!vmballoon_wq) { |
| 787 | pr_err("failed to create workqueue\n"); |
| 788 | return -ENOMEM; |
| 789 | } |
| 790 | |
| 791 | INIT_LIST_HEAD(&balloon.pages); |
| 792 | INIT_LIST_HEAD(&balloon.refused_pages); |
| 793 | |
| 794 | /* initialize rates */ |
| 795 | balloon.rate_alloc = VMW_BALLOON_RATE_ALLOC_MAX; |
| 796 | balloon.rate_free = VMW_BALLOON_RATE_FREE_MAX; |
| 797 | |
| 798 | INIT_DELAYED_WORK(&balloon.dwork, vmballoon_work); |
| 799 | |
| 800 | /* |
| 801 | * Start balloon. |
| 802 | */ |
| 803 | if (!vmballoon_send_start(&balloon)) { |
| 804 | pr_err("failed to send start command to the host\n"); |
| 805 | error = -EIO; |
| 806 | goto fail; |
| 807 | } |
| 808 | |
| 809 | if (!vmballoon_send_guest_id(&balloon)) { |
| 810 | pr_err("failed to send guest ID to the host\n"); |
| 811 | error = -EIO; |
| 812 | goto fail; |
| 813 | } |
| 814 | |
| 815 | error = vmballoon_debugfs_init(&balloon); |
| 816 | if (error) |
| 817 | goto fail; |
| 818 | |
| 819 | queue_delayed_work(vmballoon_wq, &balloon.dwork, 0); |
| 820 | |
| 821 | return 0; |
| 822 | |
| 823 | fail: |
| 824 | destroy_workqueue(vmballoon_wq); |
| 825 | return error; |
| 826 | } |
| 827 | module_init(vmballoon_init); |
| 828 | |
| 829 | static void __exit vmballoon_exit(void) |
| 830 | { |
| 831 | cancel_delayed_work_sync(&balloon.dwork); |
| 832 | destroy_workqueue(vmballoon_wq); |
| 833 | |
| 834 | vmballoon_debugfs_exit(&balloon); |
| 835 | |
| 836 | /* |
| 837 | * Deallocate all reserved memory, and reset connection with monitor. |
| 838 | * Reset connection before deallocating memory to avoid potential for |
| 839 | * additional spurious resets from guest touching deallocated pages. |
| 840 | */ |
| 841 | vmballoon_send_start(&balloon); |
| 842 | vmballoon_pop(&balloon); |
| 843 | } |
| 844 | module_exit(vmballoon_exit); |