From: kernel test robot <lkp@intel.com>
To: Julian Anastasov <ja@ssi.bg>
Cc: oe-kbuild-all@lists.linux.dev,
Pablo Neira Ayuso <pablo@netfilter.org>,
linux-doc@vger.kernel.org
Subject: [netfilter-nf-next:for-netdev-nf-next-26-06-07 1/15] htmldocs: Documentation/networking/ipvs-sysctl.rst:76: WARNING: Block quote ends without a blank line; unexpected unindent. [docutils]
Date: Sun, 07 Jun 2026 19:02:24 +0200 [thread overview]
Message-ID: <202606071851.Dc1H7hOO-lkp@intel.com> (raw)
tree: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git for-netdev-nf-next-26-06-07
head: d3bf9eae486490832bd08fd62ab0ac601f346bd4
commit: 4a15044a2b06748c99a8c8c3c6b3ee0a01f8004d [1/15] ipvs: add conn_max sysctl to limit connections
compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project f43d6834093b19baf79beda8c0337ab020ac5f17)
docutils: docutils (Docutils 0.21.2, Python 3.13.5, on linux)
reproduce: (https://download.01.org/0day-ci/archive/20260607/202606071851.Dc1H7hOO-lkp@intel.com/reproduce)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <lkp@intel.com>
| Closes: https://lore.kernel.org/oe-kbuild-all/202606071851.Dc1H7hOO-lkp@intel.com/
All warnings (new ones prefixed by >>):
Checksumming on output with GSO
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [docutils]
>> Documentation/networking/ipvs-sysctl.rst:76: WARNING: Block quote ends without a blank line; unexpected unindent. [docutils]
Documentation/networking/ipvs-sysctl.rst:76: ERROR: Unexpected section title or transition.
vim +76 Documentation/networking/ipvs-sysctl.rst
9
10 am_droprate - INTEGER
11 default 10
12
13 It sets the always mode drop rate, which is used in the mode 3
14 of the drop_rate defense.
15
16 amemthresh - INTEGER
17 default 1024
18
19 It sets the available memory threshold (in pages), which is
20 used in the automatic modes of defense. When there is no
21 enough available memory, the respective strategy will be
22 enabled and the variable is automatically set to 2, otherwise
23 the strategy is disabled and the variable is set to 1.
24
25 backup_only - BOOLEAN
26 - 0 - disabled (default)
27 - not 0 - enabled
28
29 If set, disable the director function while the server is
30 in backup mode to avoid packet loops for DR/TUN methods.
31
32 conn_lfactor - INTEGER
33 Possible values: -8 (larger table) .. 8 (smaller table)
34
35 Default: -4
36
37 Controls the sizing of the connection hash table based on the
38 load factor (number of connections per table buckets):
39
40 2^conn_lfactor = nodes / buckets
41
42 As result, the table grows if load increases and shrinks when
43 load decreases in the range of 2^8 - 2^conn_tab_bits (module
44 parameter).
45 The value is a shift count where negative values select
46 buckets = (connection hash nodes << -value) while positive
47 values select buckets = (connection hash nodes >> value). The
48 negative values reduce the collisions and reduce the time for
49 lookups but increase the table size. Positive values will
50 tolerate load above 100% when using smaller table is
51 preferred with the cost of more collisions. If using NAT
52 connections consider decreasing the value with one because
53 they add two nodes in the hash table.
54
55 Example:
56 -4: grow if load goes above 6% (buckets = nodes * 16)
57 2: grow if load goes above 400% (buckets = nodes / 4)
58
59 conn_max - INTEGER
60 Limit for number of connections, per netns.
61
62 Controls the soft and hard limit for number of connections.
63 Initially, the platform specific limit is assigned for init_net.
64 The value can be changed and later the soft limit propagated
65 to other networking namespaces.
66
67 Privileged admin can change both limits up to the value of the
68 platform limit while the unprivileged admin can change only the
69 soft limit up to the value of the hard limit.
70
71 For setups using conntrack=1 (CONFIG_IP_VS_NFCT for
72 Netfilter connection tracking) the connections can be
73 limited also by nf_conntrack_max.
74
75 soft limit hard limit
> 76 =====================================================
77 init_net:
78 create netns platform platform
79 priv admin 0 .. platform 0 .. platform
80 =====================================================
81 new netns:
82 create netns init_net:soft init_net:soft
83 priv admin 0 .. platform 0 .. platform
84 unpriv admin 0 .. hard N/A
85
86 Limits per platform:
87 1,073,741,824 (2^30 for 64-bit)
88 16,777,216 (2^24 for 32-bit)
89
90 Possible values: 0 .. platform limit
91
92 Default: platform limit
93
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
reply other threads:[~2026-06-07 17:02 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202606071851.Dc1H7hOO-lkp@intel.com \
--to=lkp@intel.com \
--cc=ja@ssi.bg \
--cc=linux-doc@vger.kernel.org \
--cc=oe-kbuild-all@lists.linux.dev \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox