Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob

2017-09-09 Thread 严海双
> On 2017年9月9日, at 下午1:16, David Miller wrote: > > From: 严海双 > Date: Sat, 9 Sep 2017 13:09:57 +0800 > >> >> >>> On 2017年9月9日, at 下午12:35, Cong Wang wrote: >>> >>> On Fri, Sep 8, 2017 at 6:25 PM, 严海双 >>> wrote: > On 2017年9月9日, at 上午6:13, Cong Wang wrote: > > On

Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob

2017-09-08 Thread David Miller
From: 严海双 Date: Sat, 9 Sep 2017 13:09:57 +0800 > > >> On 2017年9月9日, at 下午12:35, Cong Wang wrote: >> >> On Fri, Sep 8, 2017 at 6:25 PM, 严海双 >> wrote: >>> >>> On 2017年9月9日, at 上午6:13, Cong Wang wrote: On Wed, Sep 6, 2017 at 8:10 PM, Haishuang Yan wrote: > Differen

Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob

2017-09-08 Thread 严海双
> On 2017年9月9日, at 下午12:35, Cong Wang wrote: > > On Fri, Sep 8, 2017 at 6:25 PM, 严海双 wrote: >> >> >>> On 2017年9月9日, at 上午6:13, Cong Wang wrote: >>> >>> On Wed, Sep 6, 2017 at 8:10 PM, Haishuang Yan >>> wrote: Different namespace application might require different maximal number

Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob

2017-09-08 Thread Cong Wang
On Fri, Sep 8, 2017 at 6:25 PM, 严海双 wrote: > > >> On 2017年9月9日, at 上午6:13, Cong Wang wrote: >> >> On Wed, Sep 6, 2017 at 8:10 PM, Haishuang Yan >> wrote: >>> Different namespace application might require different maximal number >>> of TCP sockets independently of the host. >> >> So after your p

Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob

2017-09-08 Thread 严海双
> On 2017年9月9日, at 上午6:13, Cong Wang wrote: > > On Wed, Sep 6, 2017 at 8:10 PM, Haishuang Yan > wrote: >> Different namespace application might require different maximal number >> of TCP sockets independently of the host. > > So after your patch we could have N * net->ipv4.sysctl_tcp_max_orph

Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob

2017-09-08 Thread Cong Wang
On Wed, Sep 6, 2017 at 8:10 PM, Haishuang Yan wrote: > Different namespace application might require different maximal number > of TCP sockets independently of the host. So after your patch we could have N * net->ipv4.sysctl_tcp_max_orphans in a whole system, right? This just makes OOM easier to

[PATCH] ipv4: Namespaceify tcp_max_orphans knob

2017-09-06 Thread Haishuang Yan
Different namespace application might require different maximal number of TCP sockets independently of the host. Signed-off-by: Haishuang Yan --- include/net/netns/ipv4.h | 1 + include/net/tcp.h | 5 +++-- net/ipv4/sysctl_net_ipv4.c | 14 +++--- net/ipv4/tcp.c |