Re: [PATCH 1/4] netns: Tag the network flow with the network namespace it is in (v2)

2007-12-05 Thread David Miller
From: "Denis V. Lunev" <[EMAIL PROTECTED]> Date: Tue, 4 Dec 2007 12:53:33 +0300 > As well as marking flows this indirectly marks the ipv4 routing cache > as every routing entry contains a flow. > > It is useful to add the network namespace into flows as frequently > the routing information for in

Re: [PATCH 1/4] netns: Tag the network flow with the network namespace it is in (v2)

2007-12-05 Thread David Miller
From: "Denis V. Lunev" <[EMAIL PROTECTED]> Date: Tue, 04 Dec 2007 21:42:49 +0300 > Stephen Hemminger wrote: > > Can this be made conditional on network namespaces being configured on? > > That way the flow structure won't have to grow taking more space. > > It matters in DoS attacks where flow cac

Re: [PATCH 1/4] netns: Tag the network flow with the network namespace it is in (v2)

2007-12-04 Thread Denis V. Lunev
Herbert Xu wrote: > Denis V. Lunev <[EMAIL PROTECTED]> wrote: >> could you exactly point me out the flow cache your are talking about. >> Is this dst entry cache or struct flow_cache described in the >> net/core/flow.c > > The flow object is embedded in struct rtable so does its size change? > >

Re: [PATCH 1/4] netns: Tag the network flow with the network namespace it is in (v2)

2007-12-04 Thread Herbert Xu
Denis V. Lunev <[EMAIL PROTECTED]> wrote: > > could you exactly point me out the flow cache your are talking about. > Is this dst entry cache or struct flow_cache described in the > net/core/flow.c The flow object is embedded in struct rtable so does its size change? Cheers, -- Visit Openswan at

Re: [PATCH 1/4] netns: Tag the network flow with the network namespace it is in (v2)

2007-12-04 Thread Denis V. Lunev
Stephen Hemminger wrote: > Can this be made conditional on network namespaces being configured on? > That way the flow structure won't have to grow taking more space. > It matters in DoS attacks where flow cache becomes a critical resource. could you exactly point me out the flow cache your are ta

Re: [PATCH 1/4] netns: Tag the network flow with the network namespace it is in (v2)

2007-12-04 Thread Stephen Hemminger
On Tue, 4 Dec 2007 12:53:33 +0300 "Denis V. Lunev" <[EMAIL PROTECTED]> wrote: > As well as marking flows this indirectly marks the ipv4 routing cache > as every routing entry contains a flow. > > It is useful to add the network namespace into flows as frequently > the routing information for ingo

[PATCH 1/4] netns: Tag the network flow with the network namespace it is in (v2)

2007-12-04 Thread Denis V. Lunev
As well as marking flows this indirectly marks the ipv4 routing cache as every routing entry contains a flow. It is useful to add the network namespace into flows as frequently the routing information for ingoing and outgoing network packets is collected into a flow structure which is then used fo