Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add in-buffer batching to NPM #28040

Closed
wants to merge 11 commits into from
Closed

Conversation

brycekahle
Copy link
Member

@brycekahle brycekahle commented Jul 29, 2024

What does this PR do?

  • Reworks perf/ring buffer abstraction and usage to something less fragile.
  • Adds the option network_config.enable_kernel_batching for NPM. This enables the status quo custom batching, and is true by default. Disabling this option allows the use of in-buffer batching for perf buffers.
  • Changes to callbacks for the data flow from perf/ring buffers because of channel overhead.

Motivation

  • Decreased usage of eBPF stack space, allowing the size of the eBPF data structure to increase.
  • Runtime flexibility on how many events to in-buffer batch for perf buffers. Allowing a tradeoff between buffer size and userspace CPU usage.

Additional Notes

  • USM batching was not modified because it has a different system. This can be reworked in a future PR.

https://datadoghq.atlassian.net/browse/EBPF-481

Possible Drawbacks / Trade-offs

  • Ring buffer usage by default is discouraged for NPM/USM. This is because neither product is benefiting from the ordering of ring buffers, nor the reserve helper call to not utilize stack space. Using in-buffer batching with perf buffers results in lower CPU usage.

  • perf/ring buffer sizes need to be re-evaluated and probably increased. This is due to removing the userspace buffer and in-buffer batching utilizing more of the buffer space before data is read.

Describe how to test/QA your changes

@brycekahle brycekahle added changelog/no-changelog team/ebpf-platform qa/done QA done before merge and regressions are covered by tests labels Jul 29, 2024
@brycekahle brycekahle added this to the 7.57.0 milestone Jul 29, 2024
@brycekahle brycekahle requested review from a team as code owners July 29, 2024 21:46
Copy link
Contributor

@guyarb guyarb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did you run the branch in staging?
did you run load test to measure the impact of the change?
is there any reason to keep a large PR and a large change both to USM and NPM together?

Copy link
Contributor

@ogaca-dd ogaca-dd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGMT for files owned by ASC

}

return func(buf []byte) {
if len(buf) == 0 {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a reason to call callback with nil as the first argument when len(buf) == 0 and not always create the object with newFn()?
This is the behaviour I would expect without reading the comment of this function.

Note: I would also allow you to use type constraint for T because you would need to use *T.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, to differentiate between an empty buffer and a buffer with zeroes.

@brycekahle
Copy link
Member Author

did you run load test to measure the impact of the change?

Yes, which is how I'm able to give guidance about the CPU usage of ring buffers. I did a bunch of load tests comparing different setups (perf buffers, ring buffers, channels, callbacks).

@brycekahle
Copy link
Member Author

is there any reason to keep a large PR and a large change both to USM and NPM together?

I did not change USM batching, just to how it consumes events from a perf/ring buffer.

Copy link

cit-pr-commenter bot commented Jul 30, 2024

Go Package Import Differences

Baseline: fc52f43
Comparison: d66a9b0

binaryosarchchange
system-probelinuxamd64
+3, -0
+github.com/DataDog/datadog-agent/pkg/ebpf/perf
+github.com/DataDog/datadog-agent/pkg/util/encoding
+github.com/DataDog/datadog-agent/pkg/util/slices
system-probelinuxarm64
+3, -0
+github.com/DataDog/datadog-agent/pkg/ebpf/perf
+github.com/DataDog/datadog-agent/pkg/util/encoding
+github.com/DataDog/datadog-agent/pkg/util/slices

@pr-commenter
Copy link

pr-commenter bot commented Jul 30, 2024

Test changes on VM

Use this command from test-infra-definitions to manually test this PR changes on a VM:

inv create-vm --pipeline-id=40520591 --os-family=ubuntu

Note: This applies to commit d66a9b0

@pr-commenter
Copy link

pr-commenter bot commented Jul 30, 2024

Regression Detector

Regression Detector Results

Run ID: 0361c001-397d-4921-8985-c0e05a36e375 Metrics dashboard Target profiles

Baseline: fc52f43
Comparison: d66a9b0

Performance changes are noted in the perf column of each table:

  • ✅ = significantly better comparison variant performance
  • ❌ = significantly worse comparison variant performance
  • ➖ = no significant change in performance

No significant changes in experiment optimization goals

Confidence level: 90.00%
Effect size tolerance: |Δ mean %| ≥ 5.00%

There were no significant changes in experiment optimization goals at this confidence level and effect size tolerance.

Fine details of change detection per experiment

perf experiment goal Δ mean % Δ mean % CI links
tcp_syslog_to_blackhole ingress throughput +3.74 [-9.15, +16.63] Logs
pycheck_1000_100byte_tags % cpu utilization +2.55 [-2.28, +7.38] Logs
otel_to_otel_logs ingress throughput +0.58 [-0.23, +1.39] Logs
basic_py_check % cpu utilization +0.03 [-2.58, +2.64] Logs
uds_dogstatsd_to_api ingress throughput -0.00 [-0.00, +0.00] Logs
tcp_dd_logs_filter_exclude ingress throughput -0.00 [-0.01, +0.01] Logs
idle memory utilization -0.11 [-0.15, -0.08] Logs
uds_dogstatsd_to_api_cpu % cpu utilization -0.85 [-1.74, +0.03] Logs
file_tree memory utilization -3.69 [-3.77, -3.60] Logs

Explanation

A regression test is an A/B test of target performance in a repeatable rig, where "performance" is measured as "comparison variant minus baseline variant" for an optimization goal (e.g., ingress throughput). Due to intrinsic variability in measuring that goal, we can only estimate its mean value for each experiment; we report uncertainty in that value as a 90.00% confidence interval denoted "Δ mean % CI".

For each experiment, we decide whether a change in performance is a "regression" -- a change worth investigating further -- if all of the following criteria are true:

  1. Its estimated |Δ mean %| ≥ 5.00%, indicating the change is big enough to merit a closer look.

  2. Its 90.00% confidence interval "Δ mean % CI" does not contain zero, indicating that if our statistical model is accurate, there is at least a 90.00% chance there is a difference in performance between baseline and comparison variants.

  3. Its configuration does not mark it "erratic".

@brycekahle
Copy link
Member Author

Some data from load testing comparing main to branch, perf buffers and using in-buffer batching on the branch:
Screenshot 2024-07-30 at 2 10 29 PM
Screenshot 2024-07-30 at 2 11 03 PM
Screenshot 2024-07-30 at 2 11 27 PM
Screenshot 2024-07-30 at 2 11 58 PM

@guyarb
Copy link
Contributor

guyarb commented Aug 1, 2024

And what about dogfooding?

Copy link
Contributor

@guyarb guyarb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not comfortable with USM changes here, the PR changes too many things all at once.
I'd like to exclude USM from the changes in this PR

@leeavital
Copy link
Contributor

Agreed with Guy here, this PR too big. Individual bits can't reverted independently if we find problems, and there are too many parts changing and not enough detail in the commit message to allow for a good review.

Is there a reason it can't be broken up?

@akarpz
Copy link
Contributor

akarpz commented Aug 5, 2024

@leeavital some pieces have been broken out already (see the linked PRs above), not sure if Bryce has plans to do more, or if it's reasonable

@brycekahle brycekahle modified the milestones: 7.57.0, Triage Aug 8, 2024
@brycekahle
Copy link
Member Author

Superseded by #31402

@brycekahle brycekahle closed this Nov 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
changelog/no-changelog component/system-probe qa/done QA done before merge and regressions are covered by tests team/ebpf-platform
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants