> -----邮件原件----- > 发件人: Florian Westphal [mailto:f...@strlen.de] > 发送时间: 2018年7月24日 17:20 > 收件人: Li,Rongqing <lirongq...@baidu.com> > 抄送: netdev@vger.kernel.org; pa...@netfilter.org; > kad...@blackhole.kfki.hu; f...@strlen.de > 主题: Re: [PATCH] netfilter: avoid stalls in nf_ct_alloc_hashtable > > Li RongQing <lirongq...@baidu.com> wrote: > > when system forks a process with CLONE_NEWNET flag under the high > > memory pressure, it will trigger memory reclaim and stall for a long > > time because nf_ct_alloc_hashtable need to allocate high-order memory > > at that time. The calltrace as below: > > > nf_ct_alloc_hashtable > > nf_conntrack_init_net > > This call trace is from a kernel < 4.7. >
Sorry; it is > commit 56d52d4892d0e478a005b99ed10d0a7f488ea8c1 > netfilter: conntrack: use a single hashtable for all namespaces > > removed per-netns hash table. Thanks, Your patch fixes my issue; My patch may be able to reduce stall when modprobe nf module in memory stress, Do you think this patch has any value? -RongQing
