From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Ahern Subject: Re: [PATCH v2 4/8] memcg: accounting for ip_fib caches Date: Mon, 15 Mar 2021 09:15:43 -0600 Message-ID: References: Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=np/p9Ih58kbyvM0hIUqkXcnFFKPhSSCXOoOrFZ44REo=; b=MUPk/pbvsn449ONYJk455H6Kc7gE2u7S1noOh1h4Ceekj651HdpXnqPF/fmlu5WPOY DEMZjWTp3NjUYHaEVjXHq9/IpuVXsQNeu0rECQ2cRPbOYtmxEGxnt3Zw182ID7NEz35P CIUegNIVDabVbfTwMJT6CQUvgQNwZva/YpRFrAvOxpnGrB6pQBpNIQ40cU8N8bMx9eGl oUS6TFxnnRHPRrwCEy8p3u5SCf9hme2AESiU5ArpFKAn+UuCf70dKHW61rRBGmqU2iDF 7ELKnpHho+NQSVdMrwNtVaNb4HFspvuEEKZ5jxvoxVayIb3tfeDsUE7ThTfq0g1JayYf dkUw== In-Reply-To: Content-Language: en-US List-ID: Content-Type: text/plain; charset="us-ascii" To: Vasily Averin , cgroups-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, Michal Hocko Cc: linux-mm-Bw31MaZKKs3YtjvyW6yDsg@public.gmane.org, Johannes Weiner , Vladimir Davydov , Shakeel Butt , "David S. Miller" , David Ahern , Jakub Kicinski , Hideaki YOSHIFUJI On 3/15/21 6:23 AM, Vasily Averin wrote: > An untrusted netadmin inside a memcg-limited container can create a > huge number of routing entries. Currently, allocated kernel objects > are not accounted to proper memcg, so this can lead to global memory > shortage on the host and cause lot of OOM kiils. > > This patch enables accounting for ip_fib_alias and ip_fib_trie caches > --- > net/ipv4/fib_trie.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > Acked-by: David Ahern