1*00b67f09SDavid van Moolenbroek /* $NetBSD: resource.c,v 1.4 2014/12/10 04:38:01 christos Exp $ */
2*00b67f09SDavid van Moolenbroek
3*00b67f09SDavid van Moolenbroek /*
4*00b67f09SDavid van Moolenbroek * Copyright (C) 2004, 2007-2009 Internet Systems Consortium, Inc. ("ISC")
5*00b67f09SDavid van Moolenbroek * Copyright (C) 2000, 2001 Internet Software Consortium.
6*00b67f09SDavid van Moolenbroek *
7*00b67f09SDavid van Moolenbroek * Permission to use, copy, modify, and/or distribute this software for any
8*00b67f09SDavid van Moolenbroek * purpose with or without fee is hereby granted, provided that the above
9*00b67f09SDavid van Moolenbroek * copyright notice and this permission notice appear in all copies.
10*00b67f09SDavid van Moolenbroek *
11*00b67f09SDavid van Moolenbroek * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
12*00b67f09SDavid van Moolenbroek * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
13*00b67f09SDavid van Moolenbroek * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
14*00b67f09SDavid van Moolenbroek * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
15*00b67f09SDavid van Moolenbroek * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
16*00b67f09SDavid van Moolenbroek * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
17*00b67f09SDavid van Moolenbroek * PERFORMANCE OF THIS SOFTWARE.
18*00b67f09SDavid van Moolenbroek */
19*00b67f09SDavid van Moolenbroek
20*00b67f09SDavid van Moolenbroek /* Id: resource.c,v 1.23 2009/02/13 23:48:14 tbox Exp */
21*00b67f09SDavid van Moolenbroek
22*00b67f09SDavid van Moolenbroek #include <config.h>
23*00b67f09SDavid van Moolenbroek
24*00b67f09SDavid van Moolenbroek #include <sys/types.h>
25*00b67f09SDavid van Moolenbroek #include <sys/time.h> /* Required on some systems for <sys/resource.h>. */
26*00b67f09SDavid van Moolenbroek #include <sys/resource.h>
27*00b67f09SDavid van Moolenbroek
28*00b67f09SDavid van Moolenbroek #include <isc/platform.h>
29*00b67f09SDavid van Moolenbroek #include <isc/resource.h>
30*00b67f09SDavid van Moolenbroek #include <isc/result.h>
31*00b67f09SDavid van Moolenbroek #include <isc/util.h>
32*00b67f09SDavid van Moolenbroek
33*00b67f09SDavid van Moolenbroek #ifdef __linux__
34*00b67f09SDavid van Moolenbroek #include <linux/fs.h> /* To get the large NR_OPEN. */
35*00b67f09SDavid van Moolenbroek #endif
36*00b67f09SDavid van Moolenbroek
37*00b67f09SDavid van Moolenbroek #if defined(__hpux) && defined(HAVE_SYS_DYNTUNE_H)
38*00b67f09SDavid van Moolenbroek #include <sys/dyntune.h>
39*00b67f09SDavid van Moolenbroek #endif
40*00b67f09SDavid van Moolenbroek
41*00b67f09SDavid van Moolenbroek #include "errno2result.h"
42*00b67f09SDavid van Moolenbroek
43*00b67f09SDavid van Moolenbroek static isc_result_t
resource2rlim(isc_resource_t resource,int * rlim_resource)44*00b67f09SDavid van Moolenbroek resource2rlim(isc_resource_t resource, int *rlim_resource) {
45*00b67f09SDavid van Moolenbroek isc_result_t result = ISC_R_SUCCESS;
46*00b67f09SDavid van Moolenbroek
47*00b67f09SDavid van Moolenbroek switch (resource) {
48*00b67f09SDavid van Moolenbroek case isc_resource_coresize:
49*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_CORE;
50*00b67f09SDavid van Moolenbroek break;
51*00b67f09SDavid van Moolenbroek case isc_resource_cputime:
52*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_CPU;
53*00b67f09SDavid van Moolenbroek break;
54*00b67f09SDavid van Moolenbroek case isc_resource_datasize:
55*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_DATA;
56*00b67f09SDavid van Moolenbroek break;
57*00b67f09SDavid van Moolenbroek case isc_resource_filesize:
58*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_FSIZE;
59*00b67f09SDavid van Moolenbroek break;
60*00b67f09SDavid van Moolenbroek case isc_resource_lockedmemory:
61*00b67f09SDavid van Moolenbroek #ifdef RLIMIT_MEMLOCK
62*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_MEMLOCK;
63*00b67f09SDavid van Moolenbroek #else
64*00b67f09SDavid van Moolenbroek result = ISC_R_NOTIMPLEMENTED;
65*00b67f09SDavid van Moolenbroek #endif
66*00b67f09SDavid van Moolenbroek break;
67*00b67f09SDavid van Moolenbroek case isc_resource_openfiles:
68*00b67f09SDavid van Moolenbroek #ifdef RLIMIT_NOFILE
69*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_NOFILE;
70*00b67f09SDavid van Moolenbroek #else
71*00b67f09SDavid van Moolenbroek result = ISC_R_NOTIMPLEMENTED;
72*00b67f09SDavid van Moolenbroek #endif
73*00b67f09SDavid van Moolenbroek break;
74*00b67f09SDavid van Moolenbroek case isc_resource_processes:
75*00b67f09SDavid van Moolenbroek #ifdef RLIMIT_NPROC
76*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_NPROC;
77*00b67f09SDavid van Moolenbroek #else
78*00b67f09SDavid van Moolenbroek result = ISC_R_NOTIMPLEMENTED;
79*00b67f09SDavid van Moolenbroek #endif
80*00b67f09SDavid van Moolenbroek break;
81*00b67f09SDavid van Moolenbroek case isc_resource_residentsize:
82*00b67f09SDavid van Moolenbroek #ifdef RLIMIT_RSS
83*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_RSS;
84*00b67f09SDavid van Moolenbroek #else
85*00b67f09SDavid van Moolenbroek result = ISC_R_NOTIMPLEMENTED;
86*00b67f09SDavid van Moolenbroek #endif
87*00b67f09SDavid van Moolenbroek break;
88*00b67f09SDavid van Moolenbroek case isc_resource_stacksize:
89*00b67f09SDavid van Moolenbroek *rlim_resource = RLIMIT_STACK;
90*00b67f09SDavid van Moolenbroek break;
91*00b67f09SDavid van Moolenbroek default:
92*00b67f09SDavid van Moolenbroek /*
93*00b67f09SDavid van Moolenbroek * This test is not very robust if isc_resource_t
94*00b67f09SDavid van Moolenbroek * changes, but generates a clear assertion message.
95*00b67f09SDavid van Moolenbroek */
96*00b67f09SDavid van Moolenbroek REQUIRE(resource >= isc_resource_coresize &&
97*00b67f09SDavid van Moolenbroek resource <= isc_resource_stacksize);
98*00b67f09SDavid van Moolenbroek
99*00b67f09SDavid van Moolenbroek result = ISC_R_RANGE;
100*00b67f09SDavid van Moolenbroek break;
101*00b67f09SDavid van Moolenbroek }
102*00b67f09SDavid van Moolenbroek
103*00b67f09SDavid van Moolenbroek return (result);
104*00b67f09SDavid van Moolenbroek }
105*00b67f09SDavid van Moolenbroek
106*00b67f09SDavid van Moolenbroek isc_result_t
isc_resource_setlimit(isc_resource_t resource,isc_resourcevalue_t value)107*00b67f09SDavid van Moolenbroek isc_resource_setlimit(isc_resource_t resource, isc_resourcevalue_t value) {
108*00b67f09SDavid van Moolenbroek struct rlimit rl;
109*00b67f09SDavid van Moolenbroek ISC_PLATFORM_RLIMITTYPE rlim_value;
110*00b67f09SDavid van Moolenbroek int unixresult;
111*00b67f09SDavid van Moolenbroek int unixresource;
112*00b67f09SDavid van Moolenbroek isc_result_t result;
113*00b67f09SDavid van Moolenbroek
114*00b67f09SDavid van Moolenbroek result = resource2rlim(resource, &unixresource);
115*00b67f09SDavid van Moolenbroek if (result != ISC_R_SUCCESS)
116*00b67f09SDavid van Moolenbroek return (result);
117*00b67f09SDavid van Moolenbroek
118*00b67f09SDavid van Moolenbroek if (value == ISC_RESOURCE_UNLIMITED)
119*00b67f09SDavid van Moolenbroek rlim_value = RLIM_INFINITY;
120*00b67f09SDavid van Moolenbroek
121*00b67f09SDavid van Moolenbroek else {
122*00b67f09SDavid van Moolenbroek /*
123*00b67f09SDavid van Moolenbroek * isc_resourcevalue_t was chosen as an unsigned 64 bit
124*00b67f09SDavid van Moolenbroek * integer so that it could contain the maximum range of
125*00b67f09SDavid van Moolenbroek * reasonable values. Unfortunately, this exceeds the typical
126*00b67f09SDavid van Moolenbroek * range on Unix systems. Ensure the range of
127*00b67f09SDavid van Moolenbroek * ISC_PLATFORM_RLIMITTYPE is not overflowed.
128*00b67f09SDavid van Moolenbroek */
129*00b67f09SDavid van Moolenbroek isc_resourcevalue_t rlim_max;
130*00b67f09SDavid van Moolenbroek isc_boolean_t rlim_t_is_signed =
131*00b67f09SDavid van Moolenbroek ISC_TF(((double)(ISC_PLATFORM_RLIMITTYPE)-1) < 0);
132*00b67f09SDavid van Moolenbroek
133*00b67f09SDavid van Moolenbroek if (rlim_t_is_signed)
134*00b67f09SDavid van Moolenbroek rlim_max = ~((ISC_PLATFORM_RLIMITTYPE)1 <<
135*00b67f09SDavid van Moolenbroek (sizeof(ISC_PLATFORM_RLIMITTYPE) * 8 - 1));
136*00b67f09SDavid van Moolenbroek else
137*00b67f09SDavid van Moolenbroek rlim_max = (ISC_PLATFORM_RLIMITTYPE)-1;
138*00b67f09SDavid van Moolenbroek
139*00b67f09SDavid van Moolenbroek if (value > rlim_max)
140*00b67f09SDavid van Moolenbroek value = rlim_max;
141*00b67f09SDavid van Moolenbroek
142*00b67f09SDavid van Moolenbroek rlim_value = value;
143*00b67f09SDavid van Moolenbroek }
144*00b67f09SDavid van Moolenbroek
145*00b67f09SDavid van Moolenbroek rl.rlim_cur = rl.rlim_max = rlim_value;
146*00b67f09SDavid van Moolenbroek unixresult = setrlimit(unixresource, &rl);
147*00b67f09SDavid van Moolenbroek
148*00b67f09SDavid van Moolenbroek if (unixresult == 0)
149*00b67f09SDavid van Moolenbroek return (ISC_R_SUCCESS);
150*00b67f09SDavid van Moolenbroek
151*00b67f09SDavid van Moolenbroek #if defined(OPEN_MAX) && defined(__APPLE__)
152*00b67f09SDavid van Moolenbroek /*
153*00b67f09SDavid van Moolenbroek * The Darwin kernel doesn't accept RLIM_INFINITY for rlim_cur; the
154*00b67f09SDavid van Moolenbroek * maximum possible value is OPEN_MAX. BIND8 used to use
155*00b67f09SDavid van Moolenbroek * sysconf(_SC_OPEN_MAX) for such a case, but this value is much
156*00b67f09SDavid van Moolenbroek * smaller than OPEN_MAX and is not really effective.
157*00b67f09SDavid van Moolenbroek */
158*00b67f09SDavid van Moolenbroek if (resource == isc_resource_openfiles && rlim_value == RLIM_INFINITY) {
159*00b67f09SDavid van Moolenbroek rl.rlim_cur = OPEN_MAX;
160*00b67f09SDavid van Moolenbroek unixresult = setrlimit(unixresource, &rl);
161*00b67f09SDavid van Moolenbroek if (unixresult == 0)
162*00b67f09SDavid van Moolenbroek return (ISC_R_SUCCESS);
163*00b67f09SDavid van Moolenbroek }
164*00b67f09SDavid van Moolenbroek #elif defined(__linux__)
165*00b67f09SDavid van Moolenbroek #ifndef NR_OPEN
166*00b67f09SDavid van Moolenbroek #define NR_OPEN (1024*1024)
167*00b67f09SDavid van Moolenbroek #endif
168*00b67f09SDavid van Moolenbroek
169*00b67f09SDavid van Moolenbroek /*
170*00b67f09SDavid van Moolenbroek * Some Linux kernels don't accept RLIM_INFINIT; the maximum
171*00b67f09SDavid van Moolenbroek * possible value is the NR_OPEN defined in linux/fs.h.
172*00b67f09SDavid van Moolenbroek */
173*00b67f09SDavid van Moolenbroek if (resource == isc_resource_openfiles && rlim_value == RLIM_INFINITY) {
174*00b67f09SDavid van Moolenbroek rl.rlim_cur = rl.rlim_max = NR_OPEN;
175*00b67f09SDavid van Moolenbroek unixresult = setrlimit(unixresource, &rl);
176*00b67f09SDavid van Moolenbroek if (unixresult == 0)
177*00b67f09SDavid van Moolenbroek return (ISC_R_SUCCESS);
178*00b67f09SDavid van Moolenbroek }
179*00b67f09SDavid van Moolenbroek #elif defined(__hpux) && defined(HAVE_SYS_DYNTUNE_H)
180*00b67f09SDavid van Moolenbroek if (resource == isc_resource_openfiles && rlim_value == RLIM_INFINITY) {
181*00b67f09SDavid van Moolenbroek uint64_t maxfiles;
182*00b67f09SDavid van Moolenbroek if (gettune("maxfiles_lim", &maxfiles) == 0) {
183*00b67f09SDavid van Moolenbroek rl.rlim_cur = rl.rlim_max = maxfiles;
184*00b67f09SDavid van Moolenbroek unixresult = setrlimit(unixresource, &rl);
185*00b67f09SDavid van Moolenbroek if (unixresult == 0)
186*00b67f09SDavid van Moolenbroek return (ISC_R_SUCCESS);
187*00b67f09SDavid van Moolenbroek }
188*00b67f09SDavid van Moolenbroek }
189*00b67f09SDavid van Moolenbroek #endif
190*00b67f09SDavid van Moolenbroek if (resource == isc_resource_openfiles && rlim_value == RLIM_INFINITY) {
191*00b67f09SDavid van Moolenbroek if (getrlimit(unixresource, &rl) == 0) {
192*00b67f09SDavid van Moolenbroek rl.rlim_cur = rl.rlim_max;
193*00b67f09SDavid van Moolenbroek unixresult = setrlimit(unixresource, &rl);
194*00b67f09SDavid van Moolenbroek if (unixresult == 0)
195*00b67f09SDavid van Moolenbroek return (ISC_R_SUCCESS);
196*00b67f09SDavid van Moolenbroek }
197*00b67f09SDavid van Moolenbroek }
198*00b67f09SDavid van Moolenbroek return (isc__errno2result(errno));
199*00b67f09SDavid van Moolenbroek }
200*00b67f09SDavid van Moolenbroek
201*00b67f09SDavid van Moolenbroek isc_result_t
isc_resource_getlimit(isc_resource_t resource,isc_resourcevalue_t * value)202*00b67f09SDavid van Moolenbroek isc_resource_getlimit(isc_resource_t resource, isc_resourcevalue_t *value) {
203*00b67f09SDavid van Moolenbroek int unixresult;
204*00b67f09SDavid van Moolenbroek int unixresource;
205*00b67f09SDavid van Moolenbroek struct rlimit rl;
206*00b67f09SDavid van Moolenbroek isc_result_t result;
207*00b67f09SDavid van Moolenbroek
208*00b67f09SDavid van Moolenbroek result = resource2rlim(resource, &unixresource);
209*00b67f09SDavid van Moolenbroek if (result == ISC_R_SUCCESS) {
210*00b67f09SDavid van Moolenbroek unixresult = getrlimit(unixresource, &rl);
211*00b67f09SDavid van Moolenbroek INSIST(unixresult == 0);
212*00b67f09SDavid van Moolenbroek *value = rl.rlim_max;
213*00b67f09SDavid van Moolenbroek }
214*00b67f09SDavid van Moolenbroek
215*00b67f09SDavid van Moolenbroek return (result);
216*00b67f09SDavid van Moolenbroek }
217*00b67f09SDavid van Moolenbroek
218*00b67f09SDavid van Moolenbroek isc_result_t
isc_resource_getcurlimit(isc_resource_t resource,isc_resourcevalue_t * value)219*00b67f09SDavid van Moolenbroek isc_resource_getcurlimit(isc_resource_t resource, isc_resourcevalue_t *value) {
220*00b67f09SDavid van Moolenbroek int unixresult;
221*00b67f09SDavid van Moolenbroek int unixresource;
222*00b67f09SDavid van Moolenbroek struct rlimit rl;
223*00b67f09SDavid van Moolenbroek isc_result_t result;
224*00b67f09SDavid van Moolenbroek
225*00b67f09SDavid van Moolenbroek result = resource2rlim(resource, &unixresource);
226*00b67f09SDavid van Moolenbroek if (result == ISC_R_SUCCESS) {
227*00b67f09SDavid van Moolenbroek unixresult = getrlimit(unixresource, &rl);
228*00b67f09SDavid van Moolenbroek INSIST(unixresult == 0);
229*00b67f09SDavid van Moolenbroek *value = rl.rlim_cur;
230*00b67f09SDavid van Moolenbroek }
231*00b67f09SDavid van Moolenbroek
232*00b67f09SDavid van Moolenbroek return (result);
233*00b67f09SDavid van Moolenbroek }
234