diff options
| author |   Florian Westphal <fw@strlen.de> | 2017-07-17 13:57:20 +0200 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2017-07-18 11:13:41 -0700 |
| commit | 3c2a89ddc11896cf5498115c0380ab54b1c424b7 (patch) | |
| tree | bde766458290a2088df1762a9c1290f35c2a6bdc /net/ipv4/xfrm4_policy.c | |
| parent | vti: revert flush x-netns xfrm cache when vti interface is removed (diff) | |
| download | linux-dev-3c2a89ddc11896cf5498115c0380ab54b1c424b7.tar.xz linux-dev-3c2a89ddc11896cf5498115c0380ab54b1c424b7.zip | |
net: xfrm: revert to lower xfrm dst gc limit
revert c386578f1cdb4dac230395 ("xfrm: Let the flowcache handle its size by default.").
Once we remove flow cache, we don't have a flow cache limit anymore.
We must not allow (virtually) unlimited allocations of xfrm dst entries.
Revert back to the old xfrm dst gc limits.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
| -rw-r--r-- | net/ipv4/xfrm4_policy.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv4/xfrm4_policy.c b/net/ipv4/xfrm4_policy.c index 71b4ecc195c7..19455a5fc328 100644 --- a/net/ipv4/xfrm4_policy.c +++ b/net/ipv4/xfrm4_policy.c @@ -266,7 +266,7 @@ static struct dst_ops xfrm4_dst_ops_template = { .destroy = xfrm4_dst_destroy, .ifdown = xfrm4_dst_ifdown, .local_out = __ip_local_out, - .gc_thresh = INT_MAX, + .gc_thresh = 32768, }; static const struct xfrm_policy_afinfo xfrm4_policy_afinfo = { |