xfrm: make gc_thresh configurable in all namespaces
The xfrm gc threshold can be configured via xfrm{4,6}_gc_thresh sysctl but currently only in init_net, other namespaces always use the default value. This can substantially limit the number of IPsec tunnels that can be effectively used. Signed-off-by: Michal Kubecek <mkubecek@suse.cz> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
This commit is contained in:

committed by
Steffen Klassert

parent
1f53c80850
commit
8d068875ca
@@ -22,6 +22,7 @@ struct netns_ipv4 {
|
||||
struct ctl_table_header *frags_hdr;
|
||||
struct ctl_table_header *ipv4_hdr;
|
||||
struct ctl_table_header *route_hdr;
|
||||
struct ctl_table_header *xfrm4_hdr;
|
||||
#endif
|
||||
struct ipv4_devconf *devconf_all;
|
||||
struct ipv4_devconf *devconf_dflt;
|
||||
|
Reference in New Issue
Block a user