Skip to content

Napi#629

Open
maxime-leroy wants to merge 4 commits into
DPDK:mainfrom
maxime-leroy:napi
Open

Napi#629
maxime-leroy wants to merge 4 commits into
DPDK:mainfrom
maxime-leroy:napi

Conversation

@maxime-leroy

@maxime-leroy maxime-leroy commented Jun 9, 2026

Copy link
Copy Markdown
Collaborator

Opt-in --napi mode: an idle worker stops busy-polling and blocks on its rx queue interrupts via rte_eth_dev_rx_intr_* / rte_epoll_wait, resuming polling when a packet wakes it. A second commit pins the worker's uclamp_min to max so schedutil keeps the core at full clock while runnable, dropping only when it actually sleeps.

NAPI opt-in idle mode: RX interrupt blocking via per-thread epoll

Configuration / CLI

  • Added -n/--napi (gr_config.napi in main/config.h).
  • When --napi is enabled, option parsing forces gr_config.poll_mode = true (so idle uses the NAPI/interrupt-blocking path).
  • Documented --napi in main/main.c help text.

Port setup: enable RX queue interrupts only in NAPI mode

  • In port_configure(), RX queue interrupt configuration (conf.intr_conf.rxq) is enabled only when gr_config.napi is set; link-status interrupt logic is unchanged.
  • After rte_eth_dev_start() succeeds (in both port_mtu_set() and iface_port_reconfig() re-start paths), worker_rearm_all() is called so dataplane workers re-arm against the started ports.

Worker wakeups while blocked in rte_epoll_wait()

  • struct worker gains an eventfd (wakeup_fd) used to wake dataplane workers that are blocked in rte_epoll_wait().
  • worker_create() creates wakeup_fd (EFD_NONBLOCK | EFD_CLOEXEC); both failure cleanup and worker_destroy() close it.
  • Wakeups are routed through the updated wakeup helper and write to wakeup_fd so epoll-blocked workers resume:
    • worker_wakeup() writes 1
    • worker_rearm_all() issues a special “re-arm” kick (encoded via the new WORKER_KICK_REARM constant in worker.h)

Datapath idle behavior (modules/infra/datapath/main_loop.c)

  • Added an opt-in NAPI-style idle path gated by gr_config.napi:
    • Tracks consecutive “empty” housekeeping intervals; after NAPI_EMPTY_WINDOWS it enters napi_wait().
    • napi_wait():
      • Arms RX queue interrupts for started/owned RX queues via rte_eth_dev_rx_intr_enable()
      • Registers corresponding RX-queue event sources on the lcore’s per-thread epoll instance
      • Takes QSBR thread offline while blocking in rte_epoll_wait() (uses a short “settle” timeout first, then waits indefinitely)
      • Drains wakeup_fd on return (so control-plane/rearm kicks break/adjust the wait)
      • Disarms the RX interrupts it armed
  • In NAPI mode, blocked time inside the idle wait is accounted by folding the block interval into the subsequent cycle delta as sleep_cycles / n_sleeps; otherwise the existing usleep()-based accounting remains.
  • Adds per-thread NAPI state used to avoid redundant epoll registration and to clean up cached registrations on reconfiguration/shutdown.

CPU utilization floor while runnable

  • Adds worker_perf_floor() (called from the main loop when gr_config.napi is set) to raise uclamp_min via sched_setattr when available, so schedutil holds higher frequency while the worker is runnable.
  • meson.build detects build-time availability of sched_setattr and defines HAVE_SCHED_SETATTR.

Control-plane wake behavior

  • control_input.c now includes worker.h and uses an atomic gr_worker_active check after queueing control messages:
    • if there are no active workers, it calls worker_wakeup_any() to ensure the pending ring element is processed.
  • Introduces control_input_pending() helper and declares it in control_input.h.

Smoke test enablement

  • smoke/_init.sh appends -n to grout_extra_options when ${napi:-true} is true (default enabled).

DPDK tap PMD support needed for RX interrupt blocking

  • Updated dpdk-25.11.wrap to include two new tap-net patches:
    • net-tap-support-Rx-queue-interrupt-enable-disable.patch: adds missing Rx interrupt enable/disable ops so the generic RX interrupt API can succeed (no-op implementations returning 0).
    • net-tap-drain-queue-fd-in-Rx-interrupt-mode.patch: records/locks RX interrupt mode (intr_mode / intr_mode_set), adjusts tun_alloc and pmd_rx_burst early-exit behavior so epoll wakeups don’t incorrectly stop bursts while the fd remains readable.

@coderabbitai

coderabbitai Bot commented Jun 9, 2026

Copy link
Copy Markdown

Review Change Stack

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

This PR adds NAPI receive mode behind a new -n/--napi flag and gr_config.napi. Port setup enables RX queue interrupts when NAPI is active, workers gain eventfd-based wakeups, and the datapath loop can block on epoll after consecutive idle windows while handling QSBR transitions and sleep accounting. DPDK tap patches support RX interrupt callbacks and interrupt-mode queue draining.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@modules/infra/datapath/main_loop.c`:
- Around line 224-227: The code unconditionally calls vec_add(*registered, *qm)
after attempting to register the queue with
rte_eth_dev_rx_intr_ctl_q(qm->port_id, qm->queue_id, RTE_EPOLL_PER_THREAD,
RTE_INTR_EVENT_ADD, NULL); so a failing registration still marks the queue as
registered and later gets skipped in napi_wait(). Change this to capture the
return value of rte_eth_dev_rx_intr_ctl_q, check for success (e.g., ret == 0),
only call vec_add(*registered, *qm) on success, and handle/log the failure path
(using process logging or similar) and do not mark the queue as registered when
the call fails; reference symbols: rte_eth_dev_rx_intr_ctl_q, vec_add,
registered, qm, napi_wait.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 7c9daab1-60e9-44a6-b828-7de881b450d8

📥 Commits

Reviewing files that changed from the base of the PR and between e850e7a and 5d8ba94.

📒 Files selected for processing (4)
  • main/config.h
  • main/main.c
  • modules/infra/control/port.c
  • modules/infra/datapath/main_loop.c

Comment thread modules/infra/datapath/main_loop.c Outdated

@vjardin vjardin left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sched_setattr() shall be used from glibc.

Comment thread modules/infra/datapath/main_loop.c Outdated
// utilization and downclocks the core even at line rate. Pin uclamp_min to the
// max capacity: the governor runs the core at full speed while the worker is
// runnable and lets it drop only when it actually sleeps on the interrupt.
// glibc exposes neither struct sched_attr nor a sched_setattr() wrapper.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@MortenBroerup

Copy link
Copy Markdown
Contributor

Disclaimer: I haven't looked at the patch in detail, so my feedback is high-level only.

Have you measured the RX interrupt wakeup latency? In other words: Are user-space interrupts fast enough for general use, or only for low-traffic hours?
AFAIK, sleep(), usleep() and nanosleep() all end up in the nanosleep() syscall.
With the default timerslack of 50 µs, nanosleep() wakeup latency exceeds 50 µs.
With timerslack 1 - prctl(PR_SET_TIMERSLACK, 1, 0, 0, 0) - I have seen nanosleep() wakeup latency around 2.5 µs on hardware, and 15-20 µs on a VMware virtual appliance.

Another detail:
We considered using RX interrupts in the SmartShare too, and I like the concept.
You should consider that other events may want to trigger graph wakeup too...
E.g. a host-originating packet (e.g. a CLI output via SSH).
Or a timer wheel or other pollling-based dataplane timer triggering some high-frequency event, e.g. for calling rte_sched_port_dequeue().

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@modules/infra/control/worker.c`:
- Around line 50-54: The issue is that attr (used with pthread_attr_destroy) may
be uninitialized if eventfd() fails and the function jumps to end; to fix,
ensure pthread_attr_t attr is initialized before any early goto that can skip
pthread_attr_init or rearrange the control flow so pthread_attr_destroy is only
called when pthread_attr_init succeeded: either move the
pthread_attr_init(&attr) before the eventfd() call (so attr is always
initialized) or add a boolean/flag (e.g., attr_initialized) set after
pthread_attr_init and check it before calling pthread_attr_destroy(&attr);
update references in this function where worker->wakeup_fd, eventfd,
pthread_attr_init, pthread_attr_destroy, and attr are used.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 90a04b41-6c86-4ef5-a98d-1c2a45c64c6d

📥 Commits

Reviewing files that changed from the base of the PR and between 5d8ba94 and a5d9ec9.

📒 Files selected for processing (7)
  • main/config.h
  • main/main.c
  • meson.build
  • modules/infra/control/port.c
  • modules/infra/control/worker.c
  • modules/infra/control/worker.h
  • modules/infra/datapath/main_loop.c
✅ Files skipped from review due to trivial changes (1)
  • main/config.h
🚧 Files skipped from review as they are similar to previous changes (3)
  • main/main.c
  • modules/infra/control/port.c
  • modules/infra/datapath/main_loop.c

@maxime-leroy

Copy link
Copy Markdown
Collaborator Author

Thanks @MortenBroerup , both points are spot on. Let me split them.

Wakeup latency / timerslack

The timerslack concern doesn't apply to the napi path: an idle worker doesn't
sleep on a timer, it blocks on rte_epoll_wait() on the rx queue interrupt
eventfd (VFIO/UIO), so the wakeup is interrupt-driven and timerslack never
enters the picture. timerslack only widens the timeout part of a sleep/poll,
not the delivery of a real fd event. (For completeness, the existing
sleep-based poll mode already lowers timerslack to 1us via
PR_SET_TIMERSLACK at worker start, so it isn't stuck at the 50us default
either.)

So the dominant latency term isn't the scheduler, it's the PMD's interrupt
coalescing. The IRQ fires on the first of "N frames queued" or "holdoff timer
expires". On DPAA2 the default is threshold = 7 frames, holdoff = 100us. Under
any real load the frame threshold trips first and the holdoff never matters;
the holdoff only adds latency in the trickle case (1-2 frames then silence),
i.e. exactly the near-idle regime this mode targets. Worst-case single-packet
wakeup at trickle is therefore bounded by the holdoff (~100us on DPAA2,
tunable via DPAA2_PORTAL_INTR_TIMEOUT).

To answer the underlying question directly: this is opt-in (--napi) and aimed
at cutting power/clocks during quiet periods, not at minimum-latency max-pps
forwarding. It's "general use during low/moderate load", and you'd leave it off
on a latency-critical fast path. I haven't done a rigorous latency sweep across
PMDs yet; if that would help I can gather numbers.

Other wakeup sources

Agreed this is the important design point. Two cases:

Control-plane events already work: the worker's own wakeup eventfd is in the
same per-thread epoll set, so a reconfig or shutdown breaks the block
immediately instead of waiting for a packet. That's the generic kick path, so
anything host-originated that needs to poke a sleeping worker can reuse it.

Datapath timers: today grout's datapath is purely packet-driven, there's no
timer wheel, no rte_sched, nothing time-driven that a sleeping worker would
starve, so blocking until the next packet is safe as-is. The day a periodic
fast-path event shows up (QoS dequeue / shaping via rte_sched_port_dequeue(),
TX pacing, datapath aging), an indefinite block would indeed starve it, and the
fix is the standard one: add a timerfd to the same epoll set (or cap the
epoll_wait timeout to the next deadline) so the worker wakes on a packet or a
deadline. Same shape as the wakeup eventfd that's already wired in, so the
extension point is there when it's needed.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (2)
modules/infra/control/port.c (2)

259-282: 🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Wake workers before returning on MTU-set errors. p->started is cleared before these early returns, but worker_wakeup_all() only runs on success. A NAPI worker can stay blocked in rte_epoll_wait(-1) until some unrelated event arrives, so the failure path needs the same kick.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@modules/infra/control/port.c` around lines 259 - 282, The MTU update path in
the port control logic leaves workers asleep on error because
`worker_wakeup_all()` only runs after a successful `rte_eth_dev_start` in the
MTU-setting flow. Update the MTU change handling around `rte_eth_dev_stop`,
`rte_eth_dev_set_mtu`, and `rte_eth_dev_start` so any early return after
`p->started` is cleared also wakes workers before exiting. Keep the wakeup
behavior consistent with the success path in the same function that updates
`iface->mtu` and `subinterfaces`.

313-368: 🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Wake workers on failed reconfig

p->started is cleared before the stop/reset/configure path, but every early return before the final worker_wakeup_all() skips the kick entirely. That leaves NAPI workers blocked on the old graph until some unrelated event arrives. Move the wakeup into a shared cleanup path so failures still break the sleep.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@modules/infra/control/port.c` around lines 313 - 368, The reconfiguration
path in port handling clears p->started and then has several early returns
before reaching worker_wakeup_all(), which means workers are not kicked when
stop/reset/configure fails. Update the control flow in the port reconfig logic
so worker_wakeup_all() runs through a shared cleanup/exit path in the function
that performs port_unplug(), port_configure(), rte_eth_dev_start(), and the
reset/stop branch, ensuring workers are always awakened even on failure.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@modules/infra/control/worker.c`:
- Around line 50-54: The early eventfd() failure path in worker initialization
is using the shared end cleanup even though the worker has not yet been inserted
into the queue or had its thread created. Update the worker setup flow in the
worker initialization routine to track acquisition state with flags like
inserted and thread_created, or split into staged cleanup labels, so
STAILQ_REMOVE() and pthread_cancel() only run after those resources actually
exist. Make sure the cleanup path for the eventfd() failure exits before any
teardown that assumes insertion or thread creation has occurred.
- Around line 139-140: The wakeup write in worker wakeup handling does not retry
interrupted writes, so an EINTR can leave the NAPI wakeup undelivered and stall
teardown. Update the wakeup path around the write() call in the worker wakeup
logic to loop and retry when errno is EINTR, while still treating EAGAIN as a
harmless already-pending wakeup; keep the existing error logging in the worker
code for real failures only.

---

Outside diff comments:
In `@modules/infra/control/port.c`:
- Around line 259-282: The MTU update path in the port control logic leaves
workers asleep on error because `worker_wakeup_all()` only runs after a
successful `rte_eth_dev_start` in the MTU-setting flow. Update the MTU change
handling around `rte_eth_dev_stop`, `rte_eth_dev_set_mtu`, and
`rte_eth_dev_start` so any early return after `p->started` is cleared also wakes
workers before exiting. Keep the wakeup behavior consistent with the success
path in the same function that updates `iface->mtu` and `subinterfaces`.
- Around line 313-368: The reconfiguration path in port handling clears
p->started and then has several early returns before reaching
worker_wakeup_all(), which means workers are not kicked when
stop/reset/configure fails. Update the control flow in the port reconfig logic
so worker_wakeup_all() runs through a shared cleanup/exit path in the function
that performs port_unplug(), port_configure(), rte_eth_dev_start(), and the
reset/stop branch, ensuring workers are always awakened even on failure.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 226ac4be-c212-4ebd-ace0-499661461c6e

📥 Commits

Reviewing files that changed from the base of the PR and between a5d9ec9 and 7c1e504.

📒 Files selected for processing (7)
  • main/config.h
  • main/main.c
  • meson.build
  • modules/infra/control/port.c
  • modules/infra/control/worker.c
  • modules/infra/control/worker.h
  • modules/infra/datapath/main_loop.c
🚧 Files skipped from review as they are similar to previous changes (5)
  • main/config.h
  • meson.build
  • modules/infra/control/worker.h
  • main/main.c
  • modules/infra/datapath/main_loop.c

Comment thread modules/infra/control/worker.c Outdated
Comment on lines +139 to +140
if (write(w->wakeup_fd, &one, sizeof(one)) != sizeof(one) && errno != EAGAIN)
LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Retry interrupted eventfd writes.

If write() returns -1/EINTR, the NAPI wakeup is not delivered; a worker blocked in rte_epoll_wait() can remain asleep and make teardown hang. Retry EINTR, while keeping EAGAIN as “already pending”.

Proposed fix
-	if (write(w->wakeup_fd, &one, sizeof(one)) != sizeof(one) && errno != EAGAIN)
-		LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
+	ssize_t n;
+
+	do {
+		n = write(w->wakeup_fd, &one, sizeof(one));
+	} while (n < 0 && errno == EINTR);
+
+	if (n < 0 && errno != EAGAIN)
+		LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
+	else if (n >= 0 && n != sizeof(one))
+		LOG(ERR, "worker %u wakeup_fd short write", w->cpu_id);
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
if (write(w->wakeup_fd, &one, sizeof(one)) != sizeof(one) && errno != EAGAIN)
LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
ssize_t n;
do {
n = write(w->wakeup_fd, &one, sizeof(one));
} while (n < 0 && errno == EINTR);
if (n < 0 && errno != EAGAIN)
LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
else if (n >= 0 && n != sizeof(one))
LOG(ERR, "worker %u wakeup_fd short write", w->cpu_id);
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@modules/infra/control/worker.c` around lines 139 - 140, The wakeup write in
worker wakeup handling does not retry interrupted writes, so an EINTR can leave
the NAPI wakeup undelivered and stall teardown. Update the wakeup path around
the write() call in the worker wakeup logic to loop and retry when errno is
EINTR, while still treating EAGAIN as a harmless already-pending wakeup; keep
the existing error logging in the worker code for real failures only.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

♻️ Duplicate comments (2)
modules/infra/control/worker.c (2)

139-140: 🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Retry interrupted eventfd writes.

If write() returns -1 with errno == EINTR, the NAPI wakeup signal is not successfully delivered. A worker thread currently blocked in rte_epoll_wait() will remain asleep, potentially causing teardown or reconfiguration routines to hang indefinitely. Wrap the write operation in a retry loop to safely handle EINTR, while preserving the existing logic that correctly treats EAGAIN as an already-pending wakeup.

🐛 Proposed fix
-	if (write(w->wakeup_fd, &one, sizeof(one)) != sizeof(one) && errno != EAGAIN)
-		LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
+	ssize_t n;
+
+	do {
+		n = write(w->wakeup_fd, &one, sizeof(one));
+	} while (n < 0 && errno == EINTR);
+
+	if (n < 0 && errno != EAGAIN)
+		LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
+	else if (n >= 0 && n != sizeof(one))
+		LOG(ERR, "worker %u wakeup_fd short write", w->cpu_id);
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@modules/infra/control/worker.c` around lines 139 - 140, Update the wakeup
write logic in the worker wakeup path to retry write() when it fails with EINTR,
ensuring the NAPI wakeup signal is eventually delivered. Preserve the existing
behavior of treating EAGAIN as a pending wakeup and logging other failures
through the current LOG call.

50-54: 🩺 Stability & Availability | 🔴 Critical | ⚡ Quick win

Split cleanup by acquired resource state.

The early eventfd() failure path (and other failures prior to thread creation/insertion) jumps to the shared end cleanup block, which unconditionally executes STAILQ_REMOVE() and pthread_cancel() on the worker. Since the worker hasn't been inserted into the queue at this point, STAILQ_REMOVE will traverse the list and dereference a NULL pointer, causing a guaranteed crash. Similarly, pthread_cancel() will act on an uninitialized thread handle.

Track the acquisition state using flags to prevent acting on unacquired resources.

🐛 Proposed fix

Modify the worker_create function to track state using booleans. For example:

	bool thread_created = false;
	bool inserted = false;

// ...
	if (!!(ret = pthread_create(&worker->thread, &attr, gr_datapath_loop, worker)))
		goto end;
	thread_created = true;

	STAILQ_INSERT_TAIL(&workers, worker, next);
	inserted = true;
// ...
	} else {
		if (worker != NULL) {
			if (inserted)
				STAILQ_REMOVE(&workers, worker, worker, next);
			if (thread_created)
				pthread_cancel(worker->thread);
			pthread_cond_destroy(&worker->wakeup.cond);
// ...
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@modules/infra/control/worker.c` around lines 50 - 54, Update worker_create to
track thread creation and queue insertion with boolean state flags. Set each
flag immediately after the corresponding pthread_create and STAILQ_INSERT_TAIL
operations, then guard STAILQ_REMOVE and pthread_cancel in the shared cleanup
path with those flags while preserving cleanup for resources that were acquired.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Duplicate comments:
In `@modules/infra/control/worker.c`:
- Around line 139-140: Update the wakeup write logic in the worker wakeup path
to retry write() when it fails with EINTR, ensuring the NAPI wakeup signal is
eventually delivered. Preserve the existing behavior of treating EAGAIN as a
pending wakeup and logging other failures through the current LOG call.
- Around line 50-54: Update worker_create to track thread creation and queue
insertion with boolean state flags. Set each flag immediately after the
corresponding pthread_create and STAILQ_INSERT_TAIL operations, then guard
STAILQ_REMOVE and pthread_cancel in the shared cleanup path with those flags
while preserving cleanup for resources that were acquired.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 3621a3a0-6ff1-42c9-92e4-5e4366522fcd

📥 Commits

Reviewing files that changed from the base of the PR and between 7c1e504 and 23937d8.

📒 Files selected for processing (12)
  • main/config.h
  • main/main.c
  • meson.build
  • modules/infra/control/iface_test.c
  • modules/infra/control/port.c
  • modules/infra/control/worker.c
  • modules/infra/control/worker.h
  • modules/infra/datapath/main_loop.c
  • smoke/_init.sh
  • subprojects/dpdk-25.11.wrap
  • subprojects/packagefiles/dpdk/net-tap-drain-queue-fd-in-Rx-interrupt-mode.patch
  • subprojects/packagefiles/dpdk/net-tap-support-Rx-queue-interrupt-enable-disable.patch
🚧 Files skipped from review as they are similar to previous changes (5)
  • meson.build
  • modules/infra/control/worker.h
  • main/config.h
  • main/main.c
  • modules/infra/datapath/main_loop.c

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@modules/infra/control/worker.c`:
- Around line 52-56: Split the worker initialization cleanup around the
resource-acquisition stages in the worker creation function: when eventfd()
fails, do not remove the worker from the queue or cancel its thread because
neither resource exists yet. Track queue insertion and thread creation state, or
use staged cleanup labels, and guard STAILQ_REMOVE and
pthread_cancel(worker->thread) so each runs only after its corresponding
initialization succeeds.
- Around line 139-140: Update the wakeup write logic near the worker wakeup path
to retry the eventfd write when it fails with errno == EINTR, continuing until
it succeeds or fails for another reason. Preserve the existing EAGAIN
suppression and LOG(ERR) behavior for non-EINTR failures, using the write to
w->wakeup_fd in the worker wakeup code.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 92a351f1-0743-4e5c-8b56-1437b847e21f

📥 Commits

Reviewing files that changed from the base of the PR and between 23937d8 and 0b22acc.

📒 Files selected for processing (14)
  • main/config.h
  • main/main.c
  • meson.build
  • modules/infra/control/iface_test.c
  • modules/infra/control/port.c
  • modules/infra/control/worker.c
  • modules/infra/control/worker.h
  • modules/infra/datapath/control_input.c
  • modules/infra/datapath/control_input.h
  • modules/infra/datapath/main_loop.c
  • smoke/_init.sh
  • subprojects/dpdk-25.11.wrap
  • subprojects/packagefiles/dpdk/net-tap-drain-queue-fd-in-Rx-interrupt-mode.patch
  • subprojects/packagefiles/dpdk/net-tap-support-Rx-queue-interrupt-enable-disable.patch
🚧 Files skipped from review as they are similar to previous changes (8)
  • modules/infra/control/port.c
  • smoke/_init.sh
  • modules/infra/control/iface_test.c
  • main/config.h
  • subprojects/packagefiles/dpdk/net-tap-support-Rx-queue-interrupt-enable-disable.patch
  • meson.build
  • subprojects/packagefiles/dpdk/net-tap-drain-queue-fd-in-Rx-interrupt-mode.patch
  • modules/infra/datapath/main_loop.c

Comment thread modules/infra/control/worker.c
Comment on lines +139 to +140
if (write(w->wakeup_fd, &val, sizeof(val)) != sizeof(val) && errno != EAGAIN)
LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🔴 Critical | ⚡ Quick win

Retry interrupted eventfd writes.

If the write() to the eventfd is interrupted by a signal (EINTR), it currently fails without retrying. This means a NAPI worker blocked in rte_epoll_wait() might miss the wakeup, potentially leading to a stalled worker or hung teardown. Loop and retry when errno == EINTR.

🛠️ Proposed fix
-	if (write(w->wakeup_fd, &val, sizeof(val)) != sizeof(val) && errno != EAGAIN)
-		LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
+	ssize_t n;
+	do {
+		n = write(w->wakeup_fd, &val, sizeof(val));
+	} while (n < 0 && errno == EINTR);
+
+	if (n < 0 && errno != EAGAIN)
+		LOG(ERR, "worker %u wakeup_fd write: %s", w->cpu_id, strerror(errno));
+	else if (n >= 0 && n != sizeof(val))
+		LOG(ERR, "worker %u wakeup_fd short write", w->cpu_id);
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@modules/infra/control/worker.c` around lines 139 - 140, Update the wakeup
write logic near the worker wakeup path to retry the eventfd write when it fails
with errno == EINTR, continuing until it succeeds or fails for another reason.
Preserve the existing EAGAIN suppression and LOG(ERR) behavior for non-EINTR
failures, using the write to w->wakeup_fd in the worker wakeup code.

@maxime-leroy
maxime-leroy force-pushed the napi branch 2 times, most recently from ddbecd8 to 946c073 Compare July 17, 2026 07:14
Add an opt-in --napi mode where an idle worker arms the interrupts on
its rx queues and blocks on them through the generic
rte_eth_dev_rx_intr_* / rte_epoll_wait API instead of busy-polling. A
packet wakes the worker, which disarms and resumes polling: the usual
poll/interrupt hybrid, with the interrupt acting only as a doorbell
since frames are still pulled by the graph walk.

A worker blocks only after staying idle for NAPI_EMPTY_WINDOWS
housekeeping windows with all of its queues empty, so a single busy
queue keeps it polling. --napi implies poll-mode and replaces the
micro-sleep ramp with the interrupt block. As that block can last up
to a second it is measured explicitly and the timestamp advanced past
it, keeping the sleep in total_cycles but out of busy_cycles.

napi_wait() tracks the queues it actually armed and disarms them
through a single exit path, so a queue without interrupt support does
not leave its predecessors armed, and only marks a queue
epoll-registered once. A PMD without rx queue interrupt support keeps
polling. It iterates a per-worker snapshot of the rxqs, refreshed when
the worker picks up a config, so it never reads w->rxqs while the
control plane frees and reassigns it during a queue redistribution.

A port stop/start (e.g. the MTU applied at interface creation) may
drop the rxq interrupt epoll registration on PMDs that free it on
dev_stop (tap, mlx4, mlx5, mana, failsafe via rte_intr_free_epoll_fd).
worker_wakeup_all breaks the worker's block, and a drained kick
invalidates the registration cache so the queues are re-registered on
the next wait.

Signed-off-by: Maxime Leroy <maxime@leroys.fr>
A packet injected by the control plane via post_to_stack (replies to
local UDP, OSPF, NDP, DHCP) would sit undrained while every worker was
idle blocked on the napi rxq interrupt. Track the number of workers
running the graph; when none is, post_to_stack wakes one, and napi_wait
rechecks the control input ring before blocking (eventcount, seq_cst).

That wake must not re-register the rxq interrupts: nothing changed for
them, unlike the port stop/start case. So far any drained kick
invalidated the registration cache; split the two by encoding the kick
value. worker_rearm_all (stop/start) sets a high bit (WORKER_KICK_REARM)
and only that invalidates the cache, while worker_wakeup_any (control
input) writes a plain wake that leaves the registration untouched.

Signed-off-by: Maxime Leroy <maxime@leroys.fr>
In --napi mode an idle worker blocks on the rxq interrupt, so the
schedutil governor sees a low utilization and downclocks the core even
when it later runs at line rate. Pin the worker's uclamp_min to the max
capacity through sched_setattr(): the governor keeps the core at full
speed while the worker is runnable and lets it drop only when it
actually sleeps on the interrupt. glibc exposes neither struct
sched_attr nor a sched_setattr() wrapper, so both are declared locally.

Once pinned, going idle would otherwise leave the core clocked high, so
before blocking for good napi_wait does a few short timeout waits
(NAPI_SETTLE_TRIES x NAPI_SETTLE_MS): each wake lets schedutil
re-evaluate the decayed utilization and ratchet the frequency back down.

The syscall fails on kernels without uclamp support or without the
privilege to set it, which would otherwise warn on every worker. Report
the expected EOPNOTSUPP/ENOSYS/EPERM/EINVAL cases at NOTICE and keep
WARNING for anything unexpected.

Signed-off-by: Maxime Leroy <maxime@leroys.fr>
Run the smoke tests with --napi by default (overridable with napi=false)
so the datapath is exercised in interrupt mode and idle workers do not
burn CPU when there is no traffic.

This needs the tap PMD to support the generic Rx queue interrupt API, so
vendor two net/tap patches:
  net/tap: support Rx queue interrupt enable/disable
  net/tap: drain queue fd in Rx interrupt mode

Signed-off-by: Maxime Leroy <maxime@leroys.fr>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants