On Thu, 2015-10-01 at 15:38 -0300, Hugo Vasconcelos Saldanha wrote: > Thanks for pointing that out. > > But how should all the sysctl's that control ICMP messages sent to > specific targets (icmp_ratelimit, redirect_load, redirect_number, > redirect_silence, error_cost and error_burst) be treated without > relying on inetpeer? Entries in ip_idents hash don't represent > specific targets. Am I missing something?
You could still rely on inetpeer if its size is controlled and capped. And then fallback to ip_idents hash if inetpeer tree gets too big. Best effort would be enough. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
