Re: [PATCH net 1/9] net/tls: Bound time spent on no-data records in tls_sw_read_sock()

Jakub Kicinski <[email protected]> Mon, 3 Aug 2026 15:39:05 -0700
Newsgroups org.kernel.vger.linux-kselftest,org.kernel.vger.netdev
Message-ID <[email protected]>
On Sun, 26 Jul 2026 20:33:29 -0400 Chuck Lever wrote:
> +/* Bound the time that consecutive empty ingress data records keep
> + * the socket lock held without releasing it.
> + */
> +#define TLS_RX_NODATA_NS NSEC_PER_MSEC

A time bound is a bad idea in the kernel, a softirq can easily 
take >1msec and turn 2 consecutive zero length records into
a fatal error for the connection.