Sybase NNTP forums - End Of Life (EOL)

The NNTP forums from Sybase - forums.sybase.com - are now closed.

All new questions should be directed to the appropriate forum at the SAP Community Network (SCN).

Individual products have links to the respective forums on SCN, or you can go to SCN and search for your product in the search box (upper right corner) to find your specific developer center.

Resource Governor Questions

6 posts in General Discussion Last posting was on 2011-08-10 23:30:38.0Z
Richard Posted on 2011-08-08 15:36:28.0Z
Sender: 791a.4e3feb9f.1804289383@sybase.com
From: Richard
Newsgroups: sybase.public.ase.general
Subject: Resource Governor Questions
X-Mailer: WebNews to Mail Gateway v1.1t
Message-ID: <4e40027c.2b1.1681692777@sybase.com>
NNTP-Posting-Host: 10.22.241.41
X-Original-NNTP-Posting-Host: 10.22.241.41
Date: 8 Aug 2011 08:36:28 -0700
X-Trace: forums-1-dub 1312817788 10.22.241.41 (8 Aug 2011 08:36:28 -0700)
X-Original-Trace: 8 Aug 2011 08:36:28 -0700, 10.22.241.41
Lines: 17
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:30453
Article PK: 72631

I'm looking at enabling the Resource Governor to prevent any
of our adhoc power users from bringing the server to it's
knees. If I'm reading the documentation right you can use
it to limit I/O, rows returned, elapsed time, or tempdb
pages, but not CPU.
While a poorly formed query would likely violate the
existing metrics it would be nice if it handled CPU as well.
Any way to do that?

The Governor also forces you to name either the user OR the
application that you want to limit (ie: you can't wildcard
both user and application). I was hoping to set upper
limits for any user from any application. Is something like
that possible? What do sites addressing denial of servive
attacks do?

Thanks.


Rob V [ Sybase ] Posted on 2011-08-08 17:16:11.0Z
From: "Rob V [ Sybase ]" <rob@DO.NOT.SPAM.sypron.nl.REMOVE.THIS.DECOY>
Reply-To: rob@DO.NOT.SPAM.sypron.nl.REMOVE.THIS.DECOY
Organization: Sypron BV / TeamSybase / Sybase
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-Version: 1.0
Newsgroups: sybase.public.ase.general
Subject: Re: Resource Governor Questions
References: <4e40027c.2b1.1681692777@sybase.com>
In-Reply-To: <4e40027c.2b1.1681692777@sybase.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <4e4019db$1@forums-1-dub>
Date: 8 Aug 2011 10:16:11 -0700
X-Trace: forums-1-dub 1312823771 10.22.241.152 (8 Aug 2011 10:16:11 -0700)
X-Original-Trace: 8 Aug 2011 10:16:11 -0700, vip152.sybase.com
Lines: 45
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:30454
Article PK: 72633


On 08-Aug-2011 17:36, Richard wrote:
> I'm looking at enabling the Resource Governor to prevent any
> of our adhoc power users from bringing the server to it's
> knees. If I'm reading the documentation right you can use
> it to limit I/O, rows returned, elapsed time, or tempdb
> pages, but not CPU.
> While a poorly formed query would likely violate the
> existing metrics it would be nice if it handled CPU as well.
> Any way to do that?
>
> The Governor also forces you to name either the user OR the
> application that you want to limit (ie: you can't wildcard
> both user and application). I was hoping to set upper
> limits for any user from any application. Is something like
> that possible? What do sites addressing denial of servive
> attacks do?
>
> Thanks.

You cannot limit the CPU usage directly with the resource governor. The
best workaround would probably be to set a limit on the I/O cost (note:
this is I/O *cost*, not the number of I/Os).
If you do not specify the login name or program name (i.e. set both to
NULL), it'll apply to all users and all programs.

--
rams.
HTH,

Rob V.
-----------------------------------------------------------------
Rob Verschoor

Certified Sybase Professional DBA for ASE 15.0/12.5/12.0/11.5/11.0
and Replication Server 15.0.1/12.5 // TeamSybase

Author of Sybase books (order online at www.sypron.nl/shop):
"Tips, Tricks& Recipes for Sybase ASE" (ASE 15 edition)
"The Complete Sybase ASE Quick Reference Guide"
"The Complete Sybase Replication Server Quick Reference Guide"

rob@NO.SPAM.sypron.nl | www.sypron.nl | Twitter: @rob_verschoor
Sypron B.V., The Netherlands | Chamber of Commerce 27138666
-----------------------------------------------------------------


Richard Posted on 2011-08-09 19:13:43.0Z
Sender: 791a.4e3feb9f.1804289383@sybase.com
From: Richard
Newsgroups: sybase.public.ase.general
Subject: Re: Resource Governor Questions
X-Mailer: WebNews to Mail Gateway v1.1t
Message-ID: <4e4186e7.5d2.1681692777@sybase.com>
References: <4e4019db$1@forums-1-dub>
NNTP-Posting-Host: 10.22.241.41
X-Original-NNTP-Posting-Host: 10.22.241.41
Date: 9 Aug 2011 12:13:43 -0700
X-Trace: forums-1-dub 1312917223 10.22.241.41 (9 Aug 2011 12:13:43 -0700)
X-Original-Trace: 9 Aug 2011 12:13:43 -0700, 10.22.241.41
Lines: 35
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:30460
Article PK: 72640


> On 08-Aug-2011 17:36, Richard wrote:
If you do not specify the login name or
> program name (i.e. set both to NULL), it'll apply to all
> users and all programs.
>

Thanks for the reply Rob.

The write-up on sp_add_resource_limit says:

Syntax sp_add_resource_limit name, appname, rangename,
limittype, limitvalue [, enforced [, action [, scope ]]]

Parameters

name
is the Adaptive Server login to which the limit applies. You
must specify either a name or an appname or both. To create
a limit that applies to all users of a particular
application, specify a name of NULL.

appname
is the name of the application to which the limit applies.
You must specify either a name or an appname or both. To
create a limit that applies to all applications used by an
Adaptive Server login, specify an appname of null. To create
a limit that applies to a particular application, specify
the application name that the client program passes to the
Adaptive Server in the
login packet.

I'm reading that as "I can't wildcard both", but maybe
that's not correct.

Richard


Rob V [ Sybase ] Posted on 2011-08-09 19:43:52.0Z
From: "Rob V [ Sybase ]" <rob@DO.NOT.SPAM.sypron.nl.REMOVE.THIS.DECOY>
Reply-To: rob@DO.NOT.SPAM.sypron.nl.REMOVE.THIS.DECOY
Organization: Sypron BV / TeamSybase / Sybase
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-Version: 1.0
Newsgroups: sybase.public.ase.general
Subject: Re: Resource Governor Questions
References: <4e4019db$1@forums-1-dub> <4e4186e7.5d2.1681692777@sybase.com>
In-Reply-To: <4e4186e7.5d2.1681692777@sybase.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <4e418df8$1@forums-1-dub>
Date: 9 Aug 2011 12:43:52 -0700
X-Trace: forums-1-dub 1312919032 10.22.241.152 (9 Aug 2011 12:43:52 -0700)
X-Original-Trace: 9 Aug 2011 12:43:52 -0700, vip152.sybase.com
Lines: 47
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:30461
Article PK: 72639

Ehm... you're right. I thought you could specify both as null, but when
you try that you get this error msg:

"At least one of the login or application name must be non-NULL."

My mistake.
(I still learn something about ASE every day)

Rob V.

On 09-Aug-2011 21:13, Richard wrote:
>> On 08-Aug-2011 17:36, Richard wrote:
> If you do not specify the login name or
>> program name (i.e. set both to NULL), it'll apply to all
>> users and all programs.
>>
> Thanks for the reply Rob.
>
> The write-up on sp_add_resource_limit says:
>
> Syntax sp_add_resource_limit name, appname, rangename,
> limittype, limitvalue [, enforced [, action [, scope ]]]
>
> Parameters
>
> name
> is the Adaptive Server login to which the limit applies. You
> must specify either a name or an appname or both. To create
> a limit that applies to all users of a particular
> application, specify a name of NULL.
>
> appname
> is the name of the application to which the limit applies.
> You must specify either a name or an appname or both. To
> create a limit that applies to all applications used by an
> Adaptive Server login, specify an appname of null. To create
> a limit that applies to a particular application, specify
> the application name that the client program passes to the
> Adaptive Server in the
> login packet.
>
> I'm reading that as "I can't wildcard both", but maybe
> that's not correct.
>
> Richard


Richard Posted on 2011-08-10 19:13:09.0Z
Sender: 791a.4e3feb9f.1804289383@sybase.com
From: Richard
Newsgroups: sybase.public.ase.general
Subject: Re: Resource Governor Questions
X-Mailer: WebNews to Mail Gateway v1.1t
Message-ID: <4e42d845.811.1681692777@sybase.com>
References: <4e418df8$1@forums-1-dub>
NNTP-Posting-Host: 10.22.241.41
X-Original-NNTP-Posting-Host: 10.22.241.41
Date: 10 Aug 2011 12:13:09 -0700
X-Trace: forums-1-dub 1313003589 10.22.241.41 (10 Aug 2011 12:13:09 -0700)
X-Original-Trace: 10 Aug 2011 12:13:09 -0700, 10.22.241.41
Lines: 19
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:30462
Article PK: 72641

Now that sounds like a good enhancement request. I'd
imagine there's a good reason it was prohibited in the first
place.

> Ehm... you're right. I thought you could specify both as
> null, but when you try that you get this error msg:
>
> "At least one of the login or application name must
> be non-NULL."
>
> My mistake.
> (I still learn something about ASE every day)
>
> Rob V.
>
>
>


Rob V [ Sybase ] Posted on 2011-08-10 23:30:38.0Z
From: "Rob V [ Sybase ]" <rob@DO.NOT.SPAM.sypron.nl.REMOVE.THIS.DECOY>
Reply-To: rob@DO.NOT.SPAM.sypron.nl.REMOVE.THIS.DECOY
Organization: Sypron BV / TeamSybase / Sybase
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-Version: 1.0
Newsgroups: sybase.public.ase.general
Subject: Re: Resource Governor Questions
References: <4e418df8$1@forums-1-dub> <4e42d845.811.1681692777@sybase.com>
In-Reply-To: <4e42d845.811.1681692777@sybase.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <4e43149e$1@forums-1-dub>
Date: 10 Aug 2011 16:30:38 -0700
X-Trace: forums-1-dub 1313019038 10.22.241.152 (10 Aug 2011 16:30:38 -0700)
X-Original-Trace: 10 Aug 2011 16:30:38 -0700, vip152.sybase.com
Lines: 44
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:30463
Article PK: 72642


On 10-Aug-2011 21:13, Richard wrote:
> Now that sounds like a good enhancement request. I'd
> imagine there's a good reason it was prohibited in the first
> place.
>
>
>
>> Ehm... you're right. I thought you could specify both as
>> null, but when you try that you get this error msg:
>>
>> "At least one of the login or application name must
>> be non-NULL."
>>
>> My mistake.
>> (I still learn something about ASE every day)
>>
>> Rob V.
>>
>>
>>

As it happens, there is already such a request.
It is however not implemented yet. What you can do to help this along is
open a case with Sybase TechSupport describing your requirement, and
request that your case be linked to CR #337600.

HTH,

Rob V.
-----------------------------------------------------------------
Rob Verschoor

Certified Sybase Professional DBA for ASE 15.0/12.5/12.0/11.5/11.0
and Replication Server 15.0.1/12.5 // TeamSybase

Author of Sybase books (order online at www.sypron.nl/shop):
"Tips, Tricks& Recipes for Sybase ASE" (ASE 15 edition)
"The Complete Sybase ASE Quick Reference Guide"
"The Complete Sybase Replication Server Quick Reference Guide"

rob@NO.SPAM.sypron.nl | www.sypron.nl | Twitter: @rob_verschoor
Sypron B.V., The Netherlands | Chamber of Commerce 27138666
-----------------------------------------------------------------