Re: [PATCH nf-next] ipvs: add conn_max sysctl to limit connections
Julian Anastasov <[email protected]> Fri, 22 May 2026 17:42:46 +0300 (EEST)
| Newsgroups | org.kernel.vger.lvs-devel,org.kernel.vger.netfilter-devel |
|---|---|
| Message-ID | <[email protected]> |
Hello, On Fri, 22 May 2026, Julian Anastasov wrote: > Currently, we are using atomic_t to track the number of > connections. On 64-bit setups with large memory there is > a risk this counter to overflow. Also, setups with many > containers may need to tune the limit for connections. > > Add sysctl control to limit the number of connections to > 1,073,741,824 (64-bit) and 16,777,216 (32-bit). > Depending on the admin's privilege, the value is > used to change a soft or hard limit allowing > unprivileged admins to change the soft limit in > range determined by privileged admins. > > Signed-off-by: Julian Anastasov <[email protected]> Will send v2 to address the feedback by Sashiko. https://sashiko.dev/#/patchset/20260522105546.13732-1-ja%40ssi.bg pw-bot: changes-requested Regards -- Julian Anastasov <[email protected]>