netdev - for stable: xfrm: Let the flowcache handle its size by default.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Thu, 25 Feb 2016 14:25:04 -0500
From:	Dan Streetman <dan.streetman@...onical.com>
To:	"David S. Miller" <davem@...emloft.net>
Cc:	netdev@...r.kernel.org,
	Steffen Klassert <steffen.klassert@...unet.com>
Subject: for stable: xfrm: Let the flowcache handle its size by default.

Hi David,

can you queue commit c386578f1cdb4dac230395a951f88027f64346e3 for stable?

Without it, any system with > 16 cpus and a lot of ipsec use, that
leaves xfrmN_gc_thresh set to its default, will (eventually) see
failures to create new ipsec connections.

It fixes commit 703fb94ec58e0e8769380c2877a8a34aeb5b6c97.

commit eeb1b73378b560e00ff1da2ef09fed9254f4e128 also tried to fix it,
but didn't increase the value enough and so only fixed the problem for
< 16 cpu systems.

thanks!