Files
redis/tests/unit/obuf-limits.tcl
3d7bcb18db Fix client output buffer memory tracking not accounting for copy-avoided bulk string references (#14934)
## Problem

After #14608 (Reply Copy Avoidance), when copy avoidance kicks in, bulk
string replies are sent by reference instead of being copied into the
output buffer.
The referenced bytes are not counted in  `reply_bytes`, which causes:

1. `getClientOutputBufferMemoryUsage()` underestimates the actual memory
usage, so output buffer limits may not be triggered in time, allowing
clients to consume unbounded memory.
2. Client eviction does not account for the referenced bytes, making it
ineffective when copy avoidance is used.
3. `omem` reported in `CLIENT LIST` / `CLIENT INFO` does not reflect the
true output buffer memory footprint.

## Solution

Track the bytes of referenced bulk strings in the output buffer with two
per-client counters:

1. reply_bytes_shared - the logical size of all BULK_STR_REF payloads in
the output buffer.
   Updated incrementally whenever a reference is added/removed.
Represents memory the client is "charged" for even though it is shared
with the keyspace.

2. reply_bytes_unshared — the subset of the above where the referenced
object's refcount == 1 (i.e. the key has been deleted from the
keyspace), so the memory is kept alive solely by this client's output
buffer and would actually be freed on disconnect.
Maintained as a lazy cache refreshed via
updateClientUnsharedReplyBytes().

## Info field

CLIENT LIST / CLIENT INFO — two new fields, plus refined semantics for
existing ones:

Field | Meaning
-- | --
omem | (semantics changed) logical output-buffer memory, now including
shared memory referenced from the keyspace. Still
excludes client->buf so static clients show 0.
omem-shared | (new) shared output-buffer memory (referenced bulk
strings, not solely owned by this client).
omem-unshared | (new) unshared output-buffer memory (referenced bulk
strings solely owned by this client; freed on disconnect).
tot-mem | (semantics refined) actual memory usage —
includes omem-unshared, excludes omem-shared to avoid double-counting
keyspace memory.

INFO memory — two new fields mirroring the above:

Field | Meaning
-- | --
mem_clients_normal | (semantics changed) actual memory usage of normal
clients (includes unshared, excludes shared).
mem_clients_normal_shared | (new) aggregate shared output-buffer memory
across normal clients.
mem_clients_normal_unshared | (new) aggregate unshared output-buffer
memory across normal clients.

MEMORY STATS — schema extended with the matching keys:

Field | Meaning
-- | --
clients.normal.shared | (new) aggregate shared output-buffer memory
across normal clients.
clients.normal.unshared | (new) aggregate unshared output-buffer memory
across normal clients.

## Bug Fix
Fix missing closeClientOnOutputBufferLimitReached() call when adding a
referenced robj to the reply

---------

Co-authored-by: oranagra <[email protected]>
2026-05-06 09:46:17 +08:00

317 lines
13 KiB
Tcl

start_server {tags {"obuf-limits external:skip logreqres:skip"}} {
test {CONFIG SET client-output-buffer-limit} {
set oldval [lindex [r config get client-output-buffer-limit] 1]
catch {r config set client-output-buffer-limit "wrong number"} e
assert_match {*Wrong*arguments*} $e
catch {r config set client-output-buffer-limit "invalid_class 10mb 10mb 60"} e
assert_match {*Invalid*client*class*} $e
catch {r config set client-output-buffer-limit "master 10mb 10mb 60"} e
assert_match {*Invalid*client*class*} $e
catch {r config set client-output-buffer-limit "normal 10mbs 10mb 60"} e
assert_match {*Error*hard*} $e
catch {r config set client-output-buffer-limit "replica 10mb 10mbs 60"} e
assert_match {*Error*soft*} $e
catch {r config set client-output-buffer-limit "pubsub 10mb 10mb 60s"} e
assert_match {*Error*soft_seconds*} $e
r config set client-output-buffer-limit "normal 1mb 2mb 60 replica 3mb 4mb 70 pubsub 5mb 6mb 80"
set res [lindex [r config get client-output-buffer-limit] 1]
assert_equal $res "normal 1048576 2097152 60 slave 3145728 4194304 70 pubsub 5242880 6291456 80"
# Set back to the original value.
r config set client-output-buffer-limit $oldval
}
test {Client output buffer hard limit is enforced} {
r config set client-output-buffer-limit {pubsub 100000 0 0}
set rd1 [redis_deferring_client]
$rd1 subscribe foo
set reply [$rd1 read]
assert {$reply eq "subscribe foo 1"}
set omem 0
while 1 {
# The larger content size ensures that client.buf gets filled more quickly,
# allowing us to correctly observe the gradual increase of `omem`
r publish foo [string repeat bar 50]
set clients [split [r client list] "\r\n"]
set c [split [lindex $clients 1] " "]
if {![regexp {omem=([0-9]+)} $c - omem]} break
if {$omem > 200000} break
}
assert {$omem >= 70000 && $omem < 200000}
$rd1 close
}
foreach {soft_limit_time wait_for_timeout} {3 yes
4 no } {
if $wait_for_timeout {
set test_name "Client output buffer soft limit is enforced if time is overreached"
} else {
set test_name "Client output buffer soft limit is not enforced too early and is enforced when no traffic"
}
test $test_name {
r config set client-output-buffer-limit "pubsub 0 100000 $soft_limit_time"
set soft_limit_time [expr $soft_limit_time*1000]
set rd1 [redis_deferring_client]
$rd1 client setname test_client
set reply [$rd1 read]
assert {$reply eq "OK"}
$rd1 subscribe foo
set reply [$rd1 read]
assert {$reply eq "subscribe foo 1"}
set omem 0
set start_time 0
set time_elapsed 0
set last_under_limit_time [clock milliseconds]
while 1 {
r publish foo [string repeat "x" 1000]
set clients [split [r client list] "\r\n"]
set c [lsearch -inline $clients *name=test_client*]
if {$start_time != 0} {
set time_elapsed [expr {[clock milliseconds]-$start_time}]
# Make sure test isn't taking too long
assert {$time_elapsed <= [expr $soft_limit_time+3000]}
}
if {$wait_for_timeout && $c == ""} {
# Make sure we're disconnected when we reach the soft limit
assert {$omem >= 100000 && $time_elapsed >= $soft_limit_time}
break
} else {
assert {[regexp {omem=([0-9]+)} $c - omem]}
}
if {$omem > 100000} {
if {$start_time == 0} {set start_time $last_under_limit_time}
if {!$wait_for_timeout && $time_elapsed >= [expr $soft_limit_time-1000]} break
# Slow down loop when omem has reached the limit.
after 10
} else {
# if the OS socket buffers swallowed what we previously filled, reset the start timer.
set start_time 0
set last_under_limit_time [clock milliseconds]
}
}
if {!$wait_for_timeout} {
# After we completely stopped the traffic, wait for soft limit to time out
set timeout [expr {$soft_limit_time+1500 - ([clock milliseconds]-$start_time)}]
wait_for_condition [expr $timeout/10] 10 {
[lsearch [split [r client list] "\r\n"] *name=test_client*] == -1
} else {
fail "Soft limit timed out but client still connected"
}
}
$rd1 close
}
}
test {No response for single command if client output buffer hard limit is enforced} {
r config set latency-tracking no
r config set client-output-buffer-limit {normal 100000 0 0}
# Total size of all items must be more than 100k
set item [string repeat "x" 1000]
for {set i 0} {$i < 150} {incr i} {
r lpush mylist $item
}
set orig_mem [s used_memory]
# Set client name and get all items
set rd [redis_deferring_client]
$rd client setname mybiglist
assert {[$rd read] eq "OK"}
$rd lrange mylist 0 -1
$rd flush
after 100
# Before we read reply, redis will close this client.
set clients [r client list]
assert_no_match "*name=mybiglist*" $clients
set cur_mem [s used_memory]
# 10k just is a deviation threshold
assert {$cur_mem < 10000 + $orig_mem}
# Read nothing
set fd [$rd channel]
assert_equal {} [$rd rawread]
}
# Note: This test assumes that what's written with one write, will be read by redis in one read.
# this assumption is wrong, but seem to work empirically (for now)
test {No response for multi commands in pipeline if client output buffer limit is enforced} {
r config set client-output-buffer-limit {normal 100000 0 0}
set value [string repeat "x" 10000]
r set bigkey $value
set rd [redis_deferring_client]
$rd client setname multicommands
assert_equal "OK" [$rd read]
set server_pid [s process_id]
# Pause the server, so that the client's write will be buffered
pause_process $server_pid
# Create a pipeline of commands that will be processed in one socket read.
# It is important to use one write, in TLS mode independent writes seem
# to wait for response from the server.
# Total size should be less than OS socket buffer, redis can
# execute all commands in this pipeline when it wakes up.
set buf ""
for {set i 0} {$i < 15} {incr i} {
append buf "set $i $i\r\n"
append buf "get $i\r\n"
append buf "del $i\r\n"
# One bigkey is 10k, total response size must be more than 100k
append buf "get bigkey\r\n"
}
$rd write $buf
$rd flush
# Resume the server to process the pipeline in one go
resume_process $server_pid
# Make sure the pipeline of commands is processed
wait_for_condition 100 10 {
[expr {[regexp {calls=(\d+)} [cmdrstat get r] -> calls] ? $calls : 0}] >= 5
} else {
fail "the pipeline of commands commands is not processed"
}
# Redis must wake up if it can send reply
assert_equal "PONG" [r ping]
set clients [r client list]
assert_no_match "*name=multicommands*" $clients
assert_equal {} [$rd rawread]
}
test {Execute transactions completely even if client output buffer limit is enforced} {
r config set client-output-buffer-limit {normal 100000 0 0}
# Total size of all items must be more than 100k
set item [string repeat "x" 1000]
for {set i 0} {$i < 150} {incr i} {
r lpush mylist2 $item
}
# Output buffer limit is enforced during executing transaction
r client setname transactionclient
r set k1 v1
r multi
r set k2 v2
r get k2
r lrange mylist2 0 -1
r set k3 v3
r del k1
catch {[r exec]} e
assert_match "*I/O error*" $e
reconnect
set clients [r client list]
assert_no_match "*name=transactionclient*" $clients
# Transactions should be executed completely
assert_equal {} [r get k1]
assert_equal "v2" [r get k2]
assert_equal "v3" [r get k3]
}
test "Obuf limit, HRANDFIELD with huge count stopped mid-run" {
r config set client-output-buffer-limit {normal 1000000 0 0}
r hset myhash a b
catch {r hrandfield myhash -999999999} e
assert_match "*I/O error*" $e
reconnect
}
test "Obuf limit, KEYS stopped mid-run" {
r config set client-output-buffer-limit {normal 100000 0 0}
populate 1000 "long-key-name-prefix-of-100-chars-------------------------------------------------------------------"
catch {r keys *} e
assert_match "*I/O error*" $e
reconnect
}
test "zero-copy referenced reply bytes are reflected in memory stats" {
r flushdb
r config set client-output-buffer-limit {normal 0 0 0}
# Use a value large enough to trigger copy avoidance
set val_size 100000
r set bigkey [string repeat v $val_size]
# Use MULTI/EXEC so all observers see the zero-copy ref before it is sent.
r client setname refmem_test
r multi
r get bigkey ;# adds zero-copy ref to output buffer
r client list ;# per-client omem / omem-shared / omem-unshared / tot-mem
r info memory ;# global mem_clients_normal_shared / mem_clients_normal_unshared
r memory stats ;# clients.normal.shared and clients.normal.unshared
set res [r exec]
# omem-shared tracks total shared reply bytes, key is still alive so omem-unshared must be 0.
set clients [split [string trim [lindex $res 1]] "\r\n"]
set c [lsearch -inline $clients *name=refmem_test*]
regexp {omem-shared=([0-9]+)} $c - omem_shared
regexp {omem-unshared=([0-9]+)} $c - omem_unshared
assert {$omem_shared >= $val_size}
assert_equal 0 $omem_unshared
# mem_clients_normal_shared is incremented at write time, before the reply is sent
set info_mem [lindex $res 2]
assert {[getInfoProperty $info_mem mem_clients_normal_shared] >= $val_size}
assert_equal 0 [getInfoProperty $info_mem mem_clients_normal_unshared]
# MEMORY STATS exposes the same shared bytes; normal.unshared is 0 since the key is still in keyspace
set mem_stats [lindex $res 3]
assert {[dict get $mem_stats clients.normal.shared] >= $val_size}
assert_equal 0 [dict get $mem_stats clients.normal.unshared] ;# key still in keyspace
# After the reply is fully sent, the global counter must return to 0
wait_for_condition 50 10 {
[s mem_clients_normal_shared] == 0
} else {
fail "mem_clients_normal_shared did not return to 0 after reply was sent"
}
}
test "shared reply bytes are tracked as unshared after the key is deleted" {
r flushdb
r config set client-output-buffer-limit {normal 0 0 0}
set rr [redis_deferring_client]
$rr client setname test_client
$rr flush
# Repeatedly SET/GET/DEL a big key on a deferred client and poll CLIENT LIST
# until omem-unshared on test_client reflects the referenced bytes.
set val_size 100000
set deadline [expr {[clock milliseconds] + 5000}]
while {true} {
r set k [string repeat v $val_size]
$rr get k
$rr del k
$rr flush
after 10
set clients [split [r client list] "\r\n"]
set c [lsearch -inline $clients *name=test_client*]
regexp {omem-shared=([0-9]+)} $c - omem_shared
regexp {omem-unshared=([0-9]+)} $c - omem_unshared
if {$omem_unshared >= $val_size} {
assert_morethan_equal $omem_shared $omem_unshared
break
}
if {[clock milliseconds] > $deadline} {
fail "timed out waiting for omem-unshared to reflect unshared bytes"
}
}
$rr close
}
}