Re: [PATCH nf-next] ipvs: add conn_max sysctl to limit connections

Julian Anastasov <[email protected]> Fri, 22 May 2026 17:42:46 +0300 (EEST)
Newsgroups org.kernel.vger.lvs-devel,org.kernel.vger.netfilter-devel
Message-ID <[email protected]>
	Hello,

On Fri, 22 May 2026, Julian Anastasov wrote:

> Currently, we are using atomic_t to track the number of
> connections. On 64-bit setups with large memory there is
> a risk this counter to overflow. Also, setups with many
> containers may need to tune the limit for connections.
> 
> Add sysctl control to limit the number of connections to
> 1,073,741,824 (64-bit) and 16,777,216 (32-bit).
> Depending on the admin's privilege, the value is
> used to change a soft or hard limit allowing
> unprivileged admins to change the soft limit in
> range determined by privileged admins.
> 
> Signed-off-by: Julian Anastasov <[email protected]>

	Will send v2 to address the feedback by Sashiko.

https://sashiko.dev/#/patchset/20260522105546.13732-1-ja%40ssi.bg

pw-bot: changes-requested

Regards

--
Julian Anastasov <[email protected]>