Re: [PATCH net 1/9] net/tls: Bound time spent on no-data records in tls_sw_read_sock()

On Mon, Aug 3, 2026, at 6:39 PM, Jakub Kicinski wrote:
> On Sun, 26 Jul 2026 20:33:29 -0400 Chuck Lever wrote:
>> +/* Bound the time that consecutive empty ingress data records keep
>> + * the socket lock held without releasing it.
>> + */
>> +#define TLS_RX_NODATA_NS NSEC_PER_MSEC
>
> A time bound is a bad idea in the kernel, a softirq can easily 
> take >1msec and turn 2 consecutive zero length records into
> a fatal error for the connection.

I don’t have a particular dog in this race, but you and Sabrina need
to thumb wrestle to decide which way this needs to go. My original
thought was to use a count of zero-length packets.

-- 
Chuck Lever