From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shards.monkeyblade.net ([23.128.96.9]:56768 "EHLO shards.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725730AbeGREfa (ORCPT ); Wed, 18 Jul 2018 00:35:30 -0400 Date: Wed, 18 Jul 2018 12:59:38 +0900 (KST) Message-Id: <20180718.125938.2271502580775162784.davem@davemloft.net> Subject: Re: [PATCH RFC/RFT net-next 00/17] net: Convert neighbor tables to per-namespace From: David Miller In-Reply-To: <1a27e301-3275-b349-a2f8-afdfdc02f04f@gmail.com> References: <1a3f59a9-0ba5-c83f-16a6-f9550a84f693@gmail.com> <1a27e301-3275-b349-a2f8-afdfdc02f04f@gmail.com> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: linux-wpan-owner@vger.kernel.org List-ID: To: dsahern@gmail.com Cc: xiyou.wangcong@gmail.com, netdev@vger.kernel.org, nikita.leshchenko@oracle.com, roopa@cumulusnetworks.com, stephen@networkplumber.org, idosch@mellanox.com, jiri@mellanox.com, saeedm@mellanox.com, alex.aring@gmail.com, linux-wpan@vger.kernel.org, netfilter-devel@vger.kernel.org, linux-kernel@vger.kernel.org From: David Ahern Date: Tue, 17 Jul 2018 13:02:18 -0600 > I understand the concern about global resource and limits: as it stands > you have to increase the limits in init_net to the max expected and hope > for the best. With per namespace limits you can lower the limits of each > namespace better control the total impact on the total memory used. > Perhaps the defaults for namespaces after init_net could have really low > defaults (e.g., 16 / 32 / 64 for gc_thresh 1/2/3) requiring admin > intervention. How does this work when a namespace creates another namespace? Changing the defaults for non-init_net namespaces could work, but that could be a surprise to some people.