On (03/16/16 12:26), Hannes Frederic Sowa wrote: > > My hope was actually that by using the ->data pointer in netns you > don't need to provide the two functions, just simply use something > like the following for both cases.
Ok, it would probably be less hacky to do it as you suggest. > Do I understand it correctly that all connections of a namespace > will be dropped if you modify those sysctls? yes. it's unfortunate, but afaict there's no other way to make them use the new vars. But as I said in the comments, an admin who goes around creating this churn is probably doing this very rarely, and for a good reason, and is fully aware of the cost. So there is some degree of human control possible. --Sowmini
