From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 References: <60504b1e5830333dbea77a0d413a9a06@brasstown.quanstro.net> <7224032c68ae7df5d34def74c1245cbc@proxima.alt.za> From: Skip Tavakkolian Date: Wed, 28 Jan 2015 17:02:52 +0000 Message-ID: To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Content-Type: multipart/alternative; boundary=001a113997e69c7fd1050db9573e Subject: Re: [9fans] protection against resource exhaustion Topicbox-Message-UUID: 3d453250-ead9-11e9-9d60-3106f5b1d025 --001a113997e69c7fd1050db9573e Content-Type: text/plain; charset=UTF-8 as someone mentioned, a dedicated real or virtual term (9vx, rpi+9pi) is the right option. is there a reason this might not work for your environment? as for system watchdog, usually an external subsystem is used. i wonder if a cpu (e.g. 9pi) dedicated to monitoring the main cpu's /proc (and perhaps /net) for "abnormal activity" (whatever that is) and killing suspicious procs could work. On Wed Jan 28 2015 at 6:54:01 AM wrote: > > the reason is that each process can have up to 16mb of stack, and this > is unaccounted. > > thus the stack or (seg)?brk can commit to memory that will fault when > you touch it. > > It's a vague recollection, but the fact that the stack is being > overcommitted rings a bell. Thanks, Erik. > > Lucio. > > > --001a113997e69c7fd1050db9573e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable as someone mentioned, a dedicated real or virtual term (9vx, rpi+9pi) is th= e right option. is there a reason this might not work for your environment?=

as for system watchdog, usually an external subsystem is used.= i wonder if a cpu (e.g. 9pi) dedicated to monitoring the main cpu's /p= roc (and perhaps /net) for "abnormal activity" (whatever that is)= and killing suspicious procs could work.

On Wed Jan 28 2015 at 6:54:01 AM <lucio@proxima.alt.za> wrote:
= > the reason is that each process can have up to 16mb of stack, and this= is unaccounted.
> thus the stack or (seg)?brk can commit to memory that will fault when = you touch it.

It's a vague recollection, but the fact that the stack is being
overcommitted rings a bell.=C2=A0 Thanks, Erik.

Lucio.


--001a113997e69c7fd1050db9573e--