NFS woes

R

rihad

Hi, all. We have a simple setup: one NFS server and many clients having RW access. Server setup is as follows:

/etc/rc.conf:
Code: 
nfs_server_enable="YES"
nfsv4_server_enable="YES"
nfs_server_flags="$nfs_server_flags --maxthreads 2048"
mountd_flags="$mountd_flags -p 878"
rpcbind_enable="YES"
rpcbind_flags="-s"
rpc_lockd_enable="YES"
rpc_statd_enable="YES"

/etc/exports:
Code: 
V4: /path/to/storage -network 100.64.0.0 -mask 255.255.0.0

And each client is created and destroyed dynamically. Normally around 30-40 running at any given time:
Code: 
rpc_lockd_enable="YES"
rpcbind_enable="YES"
rpcbind_flags="-s"
rpc_lockd_flags="-h 127.0.0.1"       # Flags to rpc.lockd (if enabled)."
nfs_client_enable="YES"
rpc_statd_enable="YES"

And the mountpoint is mounted like this when starting:
Code: 
/sbin/mount -t nfs -o nfsv4,nosuid,acregmin=3600,acregmax=86400,acdirmin=3600,acdirmax=86400 masterdb.local:/$project_name/ /mnt

(ac* options is me trying to fix the problems).
Now the problem: more often than not the mount hangs, or file access hangs, or `df` hangs, or umount hangs, which all makes my life miserable. Plain `mount` call never hangs though, and displays the list of mounted filesystems, sometimes the mount on /mnt is duplicated literally hundreds of times (this is probably the result of me trying to umount /mnt + mount it again when file access (`cp` from the server to local) fails - probably mount/umount fail but leave the mount around). If this wasn't enough, the nfsd on the server chews up a lot of system CPU (no meaningful disk access at that time according to `gstat`), literally 100% cpu for about a minute, and then eases for 30-40 seconds or so. I can "fix" this cpu chewing by not trying to mount/umount on clients in case `cp` fails, but this leaves the clients inoperable without the needed files. I'm not really sure how to fix this NFS, and I'm open to any ideas. Also the NFS server logs contantly lines like this:

Code: 
nfsrv_cache_session: no session IPaddr=100.64.87.21, check NFS clients for unique /etc/hostid's
Needless to say /etc/hostid is unique on each client)
 
If other protocols work better, I could try them. Whatever it is it must support shared file locking to control the writing, and that's it. NFS supports it, but it's either buggy or badly misconfigured by me.
 
Which FreeBSD version is the server running on?

rihad said:
/etc/exports:
Code: 
V4: /path/to/storage -network 100.64.0.0 -mask 255.255.0.0
Click to expand...
Is that all in /etc/exports ?

Because the V4: line doesn't export any file systems, only marks the root of the NFSv4 tree.

exports(5)
Rich (BB code): 
     if the -alldirs flag has not been specified.  The third form has the
     string ``V4:'' followed by a single absolute path name, to specify the
     NFSv4 tree root.  This line does not export any file system, but simply
     marks where the root of the server's directory tree is for NFSv4 clients.
     The exported file systems for NFSv4 are specified via the other lines in
     the exports file in the same way as for NFSv2 and NFSv3.

Furthermore,
Rich (BB code): 
     mapped to user credentials on the server.  For the NFSv4 tree root, the
     only options that can be specified in this section are ones related to
     security: -sec, -tls, -tlscert and -tlscertuser.
so, no -network -mask
 
SirDice said:
Is there a firewall between the NFS server and the clients?
Click to expand...
There is (ipfw), but I don't think it's firewall related, because the server works half of the time.

On the server:
Code: 
01006  58041150  10578308138 allow tcp from table(0) to me 5432,111,718,823,873,878,885,958,2049,6379,8118,8123,9000,9004,9009,9200,9201,9202,9300,9301,9302,11212,26379

01011         0            0 allow udp from table(0) to me 111,823,878,885,958
01016 64356355 17474382672 allow udp from table(1) to me 41641
table 0 is tailnet 100.* addresses of each connected client, table 1 is their normal IPv4 address, 41641 is tailscale's transport port.

On the client everything is allowed from the server
Code: 
01001  4022485 1330248448 allow udp from 1.2.3.4 to me 41641 // server
01006  4005204 1064935815 allow ip from 100.64.240.7 to me // server
 
T-Daemon said:
Which FreeBSD version is the server running on?


Is that all in /etc/exports ?

Because the V4: line doesn't export any file systems, only marks the root of the NFSv4 tree.

exports(5)
Rich (BB code): 
     if the -alldirs flag has not been specified.  The third form has the
     string ``V4:'' followed by a single absolute path name, to specify the
     NFSv4 tree root.  This line does not export any file system, but simply
     marks where the root of the server's directory tree is for NFSv4 clients.
     The exported file systems for NFSv4 are specified via the other lines in
     the exports file in the same way as for NFSv2 and NFSv3.

Furthermore,
Rich (BB code): 
     mapped to user credentials on the server.  For the NFSv4 tree root, the
     only options that can be specified in this section are ones related to
     security: -sec, -tls, -tlscert and -tlscertuser.
so, no -network -mask
Click to expand...

Forgot to mention, there's also /etc/zfs/exports:
Code: 
/path/to/storage     -maproot=normaluser -alldirs -network 100.64.0.0 -mask 255.255.0.0
 
I would assume this is related to tailscale VPN (UDP protocol) and NFS being run on top using UDP.

Did you try to use TCP instead of UDP for mounting the NFS share on the client from the server ?
 
What else is running on the machine? Is it something like poudriere or other app that continually mounts/unmounts filesystems? This can overwhelm mountd resulting in the NFS server (not the machine itself) becoming deadlocked. The workaround is to stop mountd and use NFSv4 without it. If you're using NFSv3 you still need mountd, you'll need to migrate to NFSv4 before attempting the circumvention.
 
I suppose tailscale does its own transport handling at the app layer, so it shouldn't be an issue. PostgreSQL etc works fine over Tailscale between the same client/server machines, it's only NFS having problems.
NFS itself uses TCP by default - please see the quote above, UDP IPFW counters are at zero. So basically it's TCP over UDP)
 
cy@ said:
What else is running on the machine? Is it something like poudriere or other app that continually mounts/unmounts filesystems?
Click to expand...
It's me doing umount+mount in the scripts on the client machines trying to fix the failing NFS accesses.

cy@ said:
This can overwhelm mountd resulting in the NFS server (not the machine itself) becoming deadlocked. The workaround is to stop mountd and use NFSv4 without it. If you're using NFSv3 you still need mountd, you'll need to migrate to NFSv4 before attempting the circumvention.
Click to expand...
Hm, mountd is running but I don't think it's in use for NFSv4? It was needed on v3, but then I switched to v4 because v3 was even worse.
I think I'm currently using nfsv4 exclusively, as stated by the mount flags in the first post.
 
Here's how mountd is currently run on the server:
Code: 
/usr/sbin/mountd -r -S -p 878 /etc/exports /etc/zfs/exports
Not sure if NFSv4 relies on it or not.
 
rihad said:
It's me doing umount+mount in the scripts on the client machines trying to fix the failing NFS accesses.


Hm, mountd is running but I don't think it's in use for NFSv4? It was needed on v3, but then I switched to v4 because v3 was even worse.
I think I'm currently using nfsv4 exclusively, as stated by the mount flags in the first post.
Click to expand...
Sure, it's not used by NFSv4. But it still issues locks in the kernel resulting in the behaviour. It doesn't matter if you don't use NFSv3. There's still an impact.
 
rihad said:
If other protocols work better, I could try them.
Click to expand...

Ya - I hesitate to "Go There" because NFS is usually pretty bullet proof :) ...

But there is also SAMBA if you want something that will work between Unix/Linux/Windows/Mac hosts very smoothly. SMB/CIFs has come a very long way over the years and (you might?) find SAMBA's feature set has a few things you are looking for ?

You can install a FREEBSD SAMBA server and client using pkg: [RELEASE-14.3 shown]
Code: 
$ pkg search samba
samba-nsupdate-9.16.5_1        nsupdate utility with the GSS-TSIG support
samba416-4.16.11_10            Free SMB/CIFS and AD/DC server and client for Unix
samba419-4.19.9_11             Free SMB/CIFS and AD/DC server and client for Unix
samba420-4.20.7_10             Free SMB/CIFS and AD/DC server and client for Unix
$

You can read more about SAMBA here. The SAMBA folks "plug" Windows active directory (AD) and so forth support -- but I typically just hook SAMBA between Linux hosts when I use it.

There is an O'RILLEY book on SAMBA (3rd edition) you can get from the Amazon.
 
rihad said:
If other protocols work better, I could try them.
Click to expand...
vsftpd works great on 16.0-CURRENT, but I haven't load-tested it heavily (nowhere near 30-40; it's a personal NAS with me and occasionally a couple TV streaming :p)

It supports user authentication and encryption. I use FileZilla every OS (TVs have Kodi with built-in FTP support)
 
rihad said:
Hi, all. We have a simple setup: one NFS server and many clients having RW access. Server setup is as follows:

/etc/rc.conf:
Code: 
nfs_server_flags="$nfs_server_flags --maxthreads 2048"
Click to expand...
For us reading your post, the $nfs_server_flags variable obfuscates your NFS config. What is $nfs_server_flags?
 
You must log in or register to reply here.
Back
Top