From: Damian Pietras <damianp@daper.net>
To: Eric Dumazet <eric.dumazet@gmail.com>
Cc: netdev@vger.kernel.org
Subject: Re: "xfrm: Fix the gc threshold value for ipv4" broke my IPSec connections
Date: Wed, 16 Oct 2013 00:15:01 +0200 [thread overview]
Message-ID: <525DBE65.1070707@daper.net> (raw)
In-Reply-To: <1381870957.2045.73.camel@edumazet-glaptop.roam.corp.google.com>
On 15.10.2013 23:02, Eric Dumazet wrote:
>> 703fb94ec58e0e8769380c2877a8a34aeb5b6c97
>> xfrm: Fix the gc threshold value for ipv4
>>
>> Reverting it on 3.10.15 fixes my issue. This seems to be there from 3.7
>> and I don't really believe such simple case stayed broken for so long.
>> Em I missing something or there is really a bug?
>>
>> If smeone is interested in details of this configuration and commands
>> I'm running, just let me know. This was reproduced with few VMs under XEN.
>>
>
> It looks like you need to tune /proc/sys/net/ipv4/xfrm4_gc_thresh to a
> sensible value given your workload.
>
> try :
>
> echo 65536 >/proc/sys/net/ipv4/xfrm4_gc_thresh
>
> Presumably the 1024 default is really too small...
Now it's working in my test setup, I'm changing it on the production
boxes, thanks!
--
Damian Pietras
next prev parent reply other threads:[~2013-10-15 22:15 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-10-15 20:40 "xfrm: Fix the gc threshold value for ipv4" broke my IPSec connections Damian Pietras
2013-10-15 21:02 ` Eric Dumazet
2013-10-15 22:15 ` Damian Pietras [this message]
2013-10-15 22:51 ` Eric Dumazet
2013-10-16 11:35 ` Steffen Klassert
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=525DBE65.1070707@daper.net \
--to=damianp@daper.net \
--cc=eric.dumazet@gmail.com \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.