netdev - Re: [net] openvswitch: Allow deferred action fifo to expand during run time

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <20160318.171909.1177364175347712706.davem@davemloft.net>
Date:	Fri, 18 Mar 2016 17:19:09 -0400 (EDT)
From:	David Miller <davem@...emloft.net>
To:	azhou@....org
Cc:	dev@...nvswitch.com, netdev@...r.kernel.org
Subject: Re: [net] openvswitch: Allow deferred action fifo to expand during
 run time

From: Andy Zhou <azhou@....org>
Date: Thu, 17 Mar 2016 21:32:13 -0700

> Current openvswitch implementation allows up to 10 recirculation actions
> for each packet. This limit was sufficient for most use cases in the
> past, but with more new features, such as supporting connection
> tracking, and testing in larger scale network environment,
> This limit may be too restrictive.
 ...

Actions that need to recirculate that many times are extremely poorly
designed, and will have significant performance problems.

I think the way rules are put together and processed should be redone
before we do insane stuff like this.

There is no way I'm applying a patch like this, sorry.