2 * VMware Balloon driver.
4 * Copyright (C) 2000-2010, VMware, Inc. All Rights Reserved.
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the
8 * Free Software Foundation; version 2 of the License and no later version.
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, GOOD TITLE or
13 * NON INFRINGEMENT. See the GNU General Public License for more
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 * Maintained by: Dmitry Torokhov <dtor@vmware.com>
24 * This is VMware physical memory management driver for Linux. The driver
25 * acts like a "balloon" that can be inflated to reclaim physical pages by
26 * reserving them in the guest and invalidating them in the monitor,
27 * freeing up the underlying machine pages so they can be allocated to
28 * other guests. The balloon can also be deflated to allow the guest to
29 * use more physical memory. Higher level policies can control the sizes
30 * of balloons in VMs in order to manage physical memory resources.
34 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
36 #include <linux/types.h>
37 #include <linux/kernel.h>
39 #include <linux/sched.h>
40 #include <linux/module.h>
41 #include <linux/workqueue.h>
42 #include <linux/debugfs.h>
43 #include <linux/seq_file.h>
44 #include <asm/hypervisor.h>
46 MODULE_AUTHOR("VMware, Inc.");
47 MODULE_DESCRIPTION("VMware Memory Control (Balloon) Driver");
48 MODULE_VERSION("1.2.1.2-k");
49 MODULE_ALIAS("dmi:*:svnVMware*:*");
50 MODULE_ALIAS("vmware_vmmemctl");
51 MODULE_LICENSE("GPL");
54 * Various constants controlling rate of inflaint/deflating balloon,
59 * Rate of allocating memory when there is no memory pressure
60 * (driver performs non-sleeping allocations).
62 #define VMW_BALLOON_NOSLEEP_ALLOC_MAX 16384U
65 * Rates of memory allocaton when guest experiences memory pressure
66 * (driver performs sleeping allocations).
68 #define VMW_BALLOON_RATE_ALLOC_MIN 512U
69 #define VMW_BALLOON_RATE_ALLOC_MAX 2048U
70 #define VMW_BALLOON_RATE_ALLOC_INC 16U
73 * Rates for releasing pages while deflating balloon.
75 #define VMW_BALLOON_RATE_FREE_MIN 512U
76 #define VMW_BALLOON_RATE_FREE_MAX 16384U
77 #define VMW_BALLOON_RATE_FREE_INC 16U
80 * When guest is under memory pressure, use a reduced page allocation
81 * rate for next several cycles.
83 #define VMW_BALLOON_SLOW_CYCLES 4
86 * Use __GFP_HIGHMEM to allow pages from HIGHMEM zone. We don't
87 * allow wait (__GFP_WAIT) for NOSLEEP page allocations. Use
88 * __GFP_NOWARN, to suppress page allocation failure warnings.
90 #define VMW_PAGE_ALLOC_NOSLEEP (__GFP_HIGHMEM|__GFP_NOWARN)
93 * Use GFP_HIGHUSER when executing in a separate kernel thread
94 * context and allocation can sleep. This is less stressful to
95 * the guest memory system, since it allows the thread to block
96 * while memory is reclaimed, and won't take pages from emergency
99 #define VMW_PAGE_ALLOC_CANSLEEP (GFP_HIGHUSER)
101 /* Maximum number of page allocations without yielding processor */
102 #define VMW_BALLOON_YIELD_THRESHOLD 1024
104 /* Maximum number of refused pages we accumulate during inflation cycle */
105 #define VMW_BALLOON_MAX_REFUSED 16
108 * Hypervisor communication port definitions.
110 #define VMW_BALLOON_HV_PORT 0x5670
111 #define VMW_BALLOON_HV_MAGIC 0x456c6d6f
112 #define VMW_BALLOON_PROTOCOL_VERSION 2
113 #define VMW_BALLOON_GUEST_ID 1 /* Linux */
115 #define VMW_BALLOON_CMD_START 0
116 #define VMW_BALLOON_CMD_GET_TARGET 1
117 #define VMW_BALLOON_CMD_LOCK 2
118 #define VMW_BALLOON_CMD_UNLOCK 3
119 #define VMW_BALLOON_CMD_GUEST_ID 4
122 #define VMW_BALLOON_SUCCESS 0
123 #define VMW_BALLOON_FAILURE -1
124 #define VMW_BALLOON_ERROR_CMD_INVALID 1
125 #define VMW_BALLOON_ERROR_PPN_INVALID 2
126 #define VMW_BALLOON_ERROR_PPN_LOCKED 3
127 #define VMW_BALLOON_ERROR_PPN_UNLOCKED 4
128 #define VMW_BALLOON_ERROR_PPN_PINNED 5
129 #define VMW_BALLOON_ERROR_PPN_NOTNEEDED 6
130 #define VMW_BALLOON_ERROR_RESET 7
131 #define VMW_BALLOON_ERROR_BUSY 8
133 #define VMWARE_BALLOON_CMD(cmd, data, result) \
135 unsigned long __stat, __dummy1, __dummy2; \
136 __asm__ __volatile__ ("inl (%%dx)" : \
141 "0"(VMW_BALLOON_HV_MAGIC), \
142 "1"(VMW_BALLOON_CMD_##cmd), \
143 "2"(VMW_BALLOON_HV_PORT), \
150 #ifdef CONFIG_DEBUG_FS
151 struct vmballoon_stats
{
154 /* allocation statustics */
156 unsigned int alloc_fail
;
157 unsigned int sleep_alloc
;
158 unsigned int sleep_alloc_fail
;
159 unsigned int refused_alloc
;
160 unsigned int refused_free
;
163 /* monitor operations */
165 unsigned int lock_fail
;
167 unsigned int unlock_fail
;
169 unsigned int target_fail
;
171 unsigned int start_fail
;
172 unsigned int guest_type
;
173 unsigned int guest_type_fail
;
176 #define STATS_INC(stat) (stat)++
178 #define STATS_INC(stat)
183 /* list of reserved physical pages */
184 struct list_head pages
;
186 /* transient list of non-balloonable pages */
187 struct list_head refused_pages
;
188 unsigned int n_refused_pages
;
190 /* balloon size in pages */
197 /* adjustment rates (pages per second) */
198 unsigned int rate_alloc
;
199 unsigned int rate_free
;
201 /* slowdown page allocations for next few cycles */
202 unsigned int slow_allocation_cycles
;
204 #ifdef CONFIG_DEBUG_FS
206 struct vmballoon_stats stats
;
208 /* debugfs file exporting statistics */
209 struct dentry
*dbg_entry
;
212 struct sysinfo sysinfo
;
214 struct delayed_work dwork
;
217 static struct vmballoon balloon
;
218 static struct workqueue_struct
*vmballoon_wq
;
221 * Send "start" command to the host, communicating supported version
224 static bool vmballoon_send_start(struct vmballoon
*b
)
226 unsigned long status
, dummy
;
228 STATS_INC(b
->stats
.start
);
230 status
= VMWARE_BALLOON_CMD(START
, VMW_BALLOON_PROTOCOL_VERSION
, dummy
);
231 if (status
== VMW_BALLOON_SUCCESS
)
234 pr_debug("%s - failed, hv returns %ld\n", __func__
, status
);
235 STATS_INC(b
->stats
.start_fail
);
239 static bool vmballoon_check_status(struct vmballoon
*b
, unsigned long status
)
242 case VMW_BALLOON_SUCCESS
:
245 case VMW_BALLOON_ERROR_RESET
:
246 b
->reset_required
= true;
255 * Communicate guest type to the host so that it can adjust ballooning
256 * algorithm to the one most appropriate for the guest. This command
257 * is normally issued after sending "start" command and is part of
258 * standard reset sequence.
260 static bool vmballoon_send_guest_id(struct vmballoon
*b
)
262 unsigned long status
, dummy
;
264 status
= VMWARE_BALLOON_CMD(GUEST_ID
, VMW_BALLOON_GUEST_ID
, dummy
);
266 STATS_INC(b
->stats
.guest_type
);
268 if (vmballoon_check_status(b
, status
))
271 pr_debug("%s - failed, hv returns %ld\n", __func__
, status
);
272 STATS_INC(b
->stats
.guest_type_fail
);
277 * Retrieve desired balloon size from the host.
279 static bool vmballoon_send_get_target(struct vmballoon
*b
, u32
*new_target
)
281 unsigned long status
;
282 unsigned long target
;
287 * si_meminfo() is cheap. Moreover, we want to provide dynamic
288 * max balloon size later. So let us call si_meminfo() every
291 si_meminfo(&b
->sysinfo
);
292 limit
= b
->sysinfo
.totalram
;
294 /* Ensure limit fits in 32-bits */
295 limit32
= (u32
)limit
;
296 if (limit
!= limit32
)
300 STATS_INC(b
->stats
.target
);
302 status
= VMWARE_BALLOON_CMD(GET_TARGET
, limit
, target
);
303 if (vmballoon_check_status(b
, status
)) {
304 *new_target
= target
;
308 pr_debug("%s - failed, hv returns %ld\n", __func__
, status
);
309 STATS_INC(b
->stats
.target_fail
);
314 * Notify the host about allocated page so that host can use it without
315 * fear that guest will need it. Host may reject some pages, we need to
316 * check the return value and maybe submit a different page.
318 static bool vmballoon_send_lock_page(struct vmballoon
*b
, unsigned long pfn
,
319 unsigned int *hv_status
)
321 unsigned long status
, dummy
;
328 STATS_INC(b
->stats
.lock
);
330 *hv_status
= status
= VMWARE_BALLOON_CMD(LOCK
, pfn
, dummy
);
331 if (vmballoon_check_status(b
, status
))
334 pr_debug("%s - ppn %lx, hv returns %ld\n", __func__
, pfn
, status
);
335 STATS_INC(b
->stats
.lock_fail
);
340 * Notify the host that guest intends to release given page back into
341 * the pool of available (to the guest) pages.
343 static bool vmballoon_send_unlock_page(struct vmballoon
*b
, unsigned long pfn
)
345 unsigned long status
, dummy
;
352 STATS_INC(b
->stats
.unlock
);
354 status
= VMWARE_BALLOON_CMD(UNLOCK
, pfn
, dummy
);
355 if (vmballoon_check_status(b
, status
))
358 pr_debug("%s - ppn %lx, hv returns %ld\n", __func__
, pfn
, status
);
359 STATS_INC(b
->stats
.unlock_fail
);
364 * Quickly release all pages allocated for the balloon. This function is
365 * called when host decides to "reset" balloon for one reason or another.
366 * Unlike normal "deflate" we do not (shall not) notify host of the pages
369 static void vmballoon_pop(struct vmballoon
*b
)
371 struct page
*page
, *next
;
372 unsigned int count
= 0;
374 list_for_each_entry_safe(page
, next
, &b
->pages
, lru
) {
375 list_del(&page
->lru
);
377 STATS_INC(b
->stats
.free
);
380 if (++count
>= b
->rate_free
) {
388 * Perform standard reset sequence by popping the balloon (in case it
389 * is not empty) and then restarting protocol. This operation normally
390 * happens when host responds with VMW_BALLOON_ERROR_RESET to a command.
392 static void vmballoon_reset(struct vmballoon
*b
)
394 /* free all pages, skipping monitor unlock */
397 if (vmballoon_send_start(b
)) {
398 b
->reset_required
= false;
399 if (!vmballoon_send_guest_id(b
))
400 pr_err("failed to send guest ID to the host\n");
405 * Allocate (or reserve) a page for the balloon and notify the host. If host
406 * refuses the page put it on "refuse" list and allocate another one until host
407 * is satisfied. "Refused" pages are released at the end of inflation cycle
408 * (when we allocate b->rate_alloc pages).
410 static int vmballoon_reserve_page(struct vmballoon
*b
, bool can_sleep
)
414 unsigned int hv_status
;
419 STATS_INC(b
->stats
.alloc
);
421 STATS_INC(b
->stats
.sleep_alloc
);
423 flags
= can_sleep
? VMW_PAGE_ALLOC_CANSLEEP
: VMW_PAGE_ALLOC_NOSLEEP
;
424 page
= alloc_page(flags
);
427 STATS_INC(b
->stats
.alloc_fail
);
429 STATS_INC(b
->stats
.sleep_alloc_fail
);
434 locked
= vmballoon_send_lock_page(b
, page_to_pfn(page
), &hv_status
);
436 STATS_INC(b
->stats
.refused_alloc
);
438 if (hv_status
== VMW_BALLOON_ERROR_RESET
||
439 hv_status
== VMW_BALLOON_ERROR_PPN_NOTNEEDED
) {
445 * Place page on the list of non-balloonable pages
446 * and retry allocation, unless we already accumulated
447 * too many of them, in which case take a breather.
449 list_add(&page
->lru
, &b
->refused_pages
);
450 if (++b
->n_refused_pages
>= VMW_BALLOON_MAX_REFUSED
)
455 /* track allocated page */
456 list_add(&page
->lru
, &b
->pages
);
458 /* update balloon size */
465 * Release the page allocated for the balloon. Note that we first notify
466 * the host so it can make sure the page will be available for the guest
469 static int vmballoon_release_page(struct vmballoon
*b
, struct page
*page
)
471 if (!vmballoon_send_unlock_page(b
, page_to_pfn(page
)))
474 list_del(&page
->lru
);
476 /* deallocate page */
478 STATS_INC(b
->stats
.free
);
480 /* update balloon size */
487 * Release pages that were allocated while attempting to inflate the
488 * balloon but were refused by the host for one reason or another.
490 static void vmballoon_release_refused_pages(struct vmballoon
*b
)
492 struct page
*page
, *next
;
494 list_for_each_entry_safe(page
, next
, &b
->refused_pages
, lru
) {
495 list_del(&page
->lru
);
497 STATS_INC(b
->stats
.refused_free
);
500 b
->n_refused_pages
= 0;
504 * Inflate the balloon towards its target size. Note that we try to limit
505 * the rate of allocation to make sure we are not choking the rest of the
508 static void vmballoon_inflate(struct vmballoon
*b
)
513 unsigned int allocations
= 0;
515 bool alloc_can_sleep
= false;
517 pr_debug("%s - size: %d, target %d\n", __func__
, b
->size
, b
->target
);
520 * First try NOSLEEP page allocations to inflate balloon.
522 * If we do not throttle nosleep allocations, we can drain all
523 * free pages in the guest quickly (if the balloon target is high).
524 * As a side-effect, draining free pages helps to inform (force)
525 * the guest to start swapping if balloon target is not met yet,
526 * which is a desired behavior. However, balloon driver can consume
527 * all available CPU cycles if too many pages are allocated in a
528 * second. Therefore, we throttle nosleep allocations even when
529 * the guest is not under memory pressure. OTOH, if we have already
530 * predicted that the guest is under memory pressure, then we
531 * slowdown page allocations considerably.
534 goal
= b
->target
- b
->size
;
536 * Start with no sleep allocation rate which may be higher
537 * than sleeping allocation rate.
539 rate
= b
->slow_allocation_cycles
?
540 b
->rate_alloc
: VMW_BALLOON_NOSLEEP_ALLOC_MAX
;
542 pr_debug("%s - goal: %d, no-sleep rate: %d, sleep rate: %d\n",
543 __func__
, goal
, rate
, b
->rate_alloc
);
545 for (i
= 0; i
< goal
; i
++) {
547 error
= vmballoon_reserve_page(b
, alloc_can_sleep
);
549 if (error
!= -ENOMEM
) {
551 * Not a page allocation failure, stop this
552 * cycle. Maybe we'll get new target from
558 if (alloc_can_sleep
) {
560 * CANSLEEP page allocation failed, so guest
561 * is under severe memory pressure. Quickly
562 * decrease allocation rate.
564 b
->rate_alloc
= max(b
->rate_alloc
/ 2,
565 VMW_BALLOON_RATE_ALLOC_MIN
);
570 * NOSLEEP page allocation failed, so the guest is
571 * under memory pressure. Let us slow down page
572 * allocations for next few cycles so that the guest
573 * gets out of memory pressure. Also, if we already
574 * allocated b->rate_alloc pages, let's pause,
575 * otherwise switch to sleeping allocations.
577 b
->slow_allocation_cycles
= VMW_BALLOON_SLOW_CYCLES
;
579 if (i
>= b
->rate_alloc
)
582 alloc_can_sleep
= true;
583 /* Lower rate for sleeping allocations. */
584 rate
= b
->rate_alloc
;
587 if (++allocations
> VMW_BALLOON_YIELD_THRESHOLD
) {
593 /* We allocated enough pages, let's take a break. */
599 * We reached our goal without failures so try increasing
602 if (error
== 0 && i
>= b
->rate_alloc
) {
603 unsigned int mult
= i
/ b
->rate_alloc
;
606 min(b
->rate_alloc
+ mult
* VMW_BALLOON_RATE_ALLOC_INC
,
607 VMW_BALLOON_RATE_ALLOC_MAX
);
610 vmballoon_release_refused_pages(b
);
614 * Decrease the size of the balloon allowing guest to use more memory.
616 static void vmballoon_deflate(struct vmballoon
*b
)
618 struct page
*page
, *next
;
623 pr_debug("%s - size: %d, target %d\n", __func__
, b
->size
, b
->target
);
625 /* limit deallocation rate */
626 goal
= min(b
->size
- b
->target
, b
->rate_free
);
628 pr_debug("%s - goal: %d, rate: %d\n", __func__
, goal
, b
->rate_free
);
630 /* free pages to reach target */
631 list_for_each_entry_safe(page
, next
, &b
->pages
, lru
) {
632 error
= vmballoon_release_page(b
, page
);
634 /* quickly decrease rate in case of error */
635 b
->rate_free
= max(b
->rate_free
/ 2,
636 VMW_BALLOON_RATE_FREE_MIN
);
644 /* slowly increase rate if there were no errors */
645 b
->rate_free
= min(b
->rate_free
+ VMW_BALLOON_RATE_FREE_INC
,
646 VMW_BALLOON_RATE_FREE_MAX
);
650 * Balloon work function: reset protocol, if needed, get the new size and
651 * adjust balloon as needed. Repeat in 1 sec.
653 static void vmballoon_work(struct work_struct
*work
)
655 struct delayed_work
*dwork
= to_delayed_work(work
);
656 struct vmballoon
*b
= container_of(dwork
, struct vmballoon
, dwork
);
659 STATS_INC(b
->stats
.timer
);
661 if (b
->reset_required
)
664 if (b
->slow_allocation_cycles
> 0)
665 b
->slow_allocation_cycles
--;
667 if (vmballoon_send_get_target(b
, &target
)) {
668 /* update target, adjust size */
671 if (b
->size
< target
)
672 vmballoon_inflate(b
);
673 else if (b
->size
> target
)
674 vmballoon_deflate(b
);
677 queue_delayed_work(vmballoon_wq
, dwork
, round_jiffies_relative(HZ
));
683 #ifdef CONFIG_DEBUG_FS
685 static int vmballoon_debug_show(struct seq_file
*f
, void *offset
)
687 struct vmballoon
*b
= f
->private;
688 struct vmballoon_stats
*stats
= &b
->stats
;
690 /* format size info */
692 "target: %8d pages\n"
693 "current: %8d pages\n",
696 /* format rate info */
698 "rateNoSleepAlloc: %8d pages/sec\n"
699 "rateSleepAlloc: %8d pages/sec\n"
700 "rateFree: %8d pages/sec\n",
701 VMW_BALLOON_NOSLEEP_ALLOC_MAX
,
702 b
->rate_alloc
, b
->rate_free
);
707 "start: %8u (%4u failed)\n"
708 "guestType: %8u (%4u failed)\n"
709 "lock: %8u (%4u failed)\n"
710 "unlock: %8u (%4u failed)\n"
711 "target: %8u (%4u failed)\n"
712 "primNoSleepAlloc: %8u (%4u failed)\n"
713 "primCanSleepAlloc: %8u (%4u failed)\n"
718 stats
->start
, stats
->start_fail
,
719 stats
->guest_type
, stats
->guest_type_fail
,
720 stats
->lock
, stats
->lock_fail
,
721 stats
->unlock
, stats
->unlock_fail
,
722 stats
->target
, stats
->target_fail
,
723 stats
->alloc
, stats
->alloc_fail
,
724 stats
->sleep_alloc
, stats
->sleep_alloc_fail
,
726 stats
->refused_alloc
, stats
->refused_free
);
731 static int vmballoon_debug_open(struct inode
*inode
, struct file
*file
)
733 return single_open(file
, vmballoon_debug_show
, inode
->i_private
);
736 static const struct file_operations vmballoon_debug_fops
= {
737 .owner
= THIS_MODULE
,
738 .open
= vmballoon_debug_open
,
741 .release
= single_release
,
744 static int __init
vmballoon_debugfs_init(struct vmballoon
*b
)
748 b
->dbg_entry
= debugfs_create_file("vmmemctl", S_IRUGO
, NULL
, b
,
749 &vmballoon_debug_fops
);
750 if (IS_ERR(b
->dbg_entry
)) {
751 error
= PTR_ERR(b
->dbg_entry
);
752 pr_err("failed to create debugfs entry, error: %d\n", error
);
759 static void __exit
vmballoon_debugfs_exit(struct vmballoon
*b
)
761 debugfs_remove(b
->dbg_entry
);
766 static inline int vmballoon_debugfs_init(struct vmballoon
*b
)
771 static inline void vmballoon_debugfs_exit(struct vmballoon
*b
)
775 #endif /* CONFIG_DEBUG_FS */
777 static int __init
vmballoon_init(void)
782 * Check if we are running on VMware's hypervisor and bail out
785 if (x86_hyper
!= &x86_hyper_vmware
)
788 vmballoon_wq
= create_freezable_workqueue("vmmemctl");
790 pr_err("failed to create workqueue\n");
794 INIT_LIST_HEAD(&balloon
.pages
);
795 INIT_LIST_HEAD(&balloon
.refused_pages
);
797 /* initialize rates */
798 balloon
.rate_alloc
= VMW_BALLOON_RATE_ALLOC_MAX
;
799 balloon
.rate_free
= VMW_BALLOON_RATE_FREE_MAX
;
801 INIT_DELAYED_WORK(&balloon
.dwork
, vmballoon_work
);
806 if (!vmballoon_send_start(&balloon
)) {
807 pr_err("failed to send start command to the host\n");
812 if (!vmballoon_send_guest_id(&balloon
)) {
813 pr_err("failed to send guest ID to the host\n");
818 error
= vmballoon_debugfs_init(&balloon
);
822 queue_delayed_work(vmballoon_wq
, &balloon
.dwork
, 0);
827 destroy_workqueue(vmballoon_wq
);
830 module_init(vmballoon_init
);
832 static void __exit
vmballoon_exit(void)
834 cancel_delayed_work_sync(&balloon
.dwork
);
835 destroy_workqueue(vmballoon_wq
);
837 vmballoon_debugfs_exit(&balloon
);
840 * Deallocate all reserved memory, and reset connection with monitor.
841 * Reset connection before deallocating memory to avoid potential for
842 * additional spurious resets from guest touching deallocated pages.
844 vmballoon_send_start(&balloon
);
845 vmballoon_pop(&balloon
);
847 module_exit(vmballoon_exit
);