* [netfilter-nf-next:for-netdev-nf-next-26-06-07 1/15] htmldocs: Documentation/networking/ipvs-sysctl.rst:76: WARNING: Block quote ends without a blank line; unexpected unindent. [docutils]
@ 2026-06-07 17:02 kernel test robot
0 siblings, 0 replies; only message in thread
From: kernel test robot @ 2026-06-07 17:02 UTC (permalink / raw)
To: Julian Anastasov; +Cc: oe-kbuild-all, Pablo Neira Ayuso, linux-doc
tree: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git for-netdev-nf-next-26-06-07
head: d3bf9eae486490832bd08fd62ab0ac601f346bd4
commit: 4a15044a2b06748c99a8c8c3c6b3ee0a01f8004d [1/15] ipvs: add conn_max sysctl to limit connections
compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project f43d6834093b19baf79beda8c0337ab020ac5f17)
docutils: docutils (Docutils 0.21.2, Python 3.13.5, on linux)
reproduce: (https://download.01.org/0day-ci/archive/20260607/202606071851.Dc1H7hOO-lkp@intel.com/reproduce)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <lkp@intel.com>
| Closes: https://lore.kernel.org/oe-kbuild-all/202606071851.Dc1H7hOO-lkp@intel.com/
All warnings (new ones prefixed by >>):
Checksumming on output with GSO
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [docutils]
>> Documentation/networking/ipvs-sysctl.rst:76: WARNING: Block quote ends without a blank line; unexpected unindent. [docutils]
Documentation/networking/ipvs-sysctl.rst:76: ERROR: Unexpected section title or transition.
vim +76 Documentation/networking/ipvs-sysctl.rst
9
10 am_droprate - INTEGER
11 default 10
12
13 It sets the always mode drop rate, which is used in the mode 3
14 of the drop_rate defense.
15
16 amemthresh - INTEGER
17 default 1024
18
19 It sets the available memory threshold (in pages), which is
20 used in the automatic modes of defense. When there is no
21 enough available memory, the respective strategy will be
22 enabled and the variable is automatically set to 2, otherwise
23 the strategy is disabled and the variable is set to 1.
24
25 backup_only - BOOLEAN
26 - 0 - disabled (default)
27 - not 0 - enabled
28
29 If set, disable the director function while the server is
30 in backup mode to avoid packet loops for DR/TUN methods.
31
32 conn_lfactor - INTEGER
33 Possible values: -8 (larger table) .. 8 (smaller table)
34
35 Default: -4
36
37 Controls the sizing of the connection hash table based on the
38 load factor (number of connections per table buckets):
39
40 2^conn_lfactor = nodes / buckets
41
42 As result, the table grows if load increases and shrinks when
43 load decreases in the range of 2^8 - 2^conn_tab_bits (module
44 parameter).
45 The value is a shift count where negative values select
46 buckets = (connection hash nodes << -value) while positive
47 values select buckets = (connection hash nodes >> value). The
48 negative values reduce the collisions and reduce the time for
49 lookups but increase the table size. Positive values will
50 tolerate load above 100% when using smaller table is
51 preferred with the cost of more collisions. If using NAT
52 connections consider decreasing the value with one because
53 they add two nodes in the hash table.
54
55 Example:
56 -4: grow if load goes above 6% (buckets = nodes * 16)
57 2: grow if load goes above 400% (buckets = nodes / 4)
58
59 conn_max - INTEGER
60 Limit for number of connections, per netns.
61
62 Controls the soft and hard limit for number of connections.
63 Initially, the platform specific limit is assigned for init_net.
64 The value can be changed and later the soft limit propagated
65 to other networking namespaces.
66
67 Privileged admin can change both limits up to the value of the
68 platform limit while the unprivileged admin can change only the
69 soft limit up to the value of the hard limit.
70
71 For setups using conntrack=1 (CONFIG_IP_VS_NFCT for
72 Netfilter connection tracking) the connections can be
73 limited also by nf_conntrack_max.
74
75 soft limit hard limit
> 76 =====================================================
77 init_net:
78 create netns platform platform
79 priv admin 0 .. platform 0 .. platform
80 =====================================================
81 new netns:
82 create netns init_net:soft init_net:soft
83 priv admin 0 .. platform 0 .. platform
84 unpriv admin 0 .. hard N/A
85
86 Limits per platform:
87 1,073,741,824 (2^30 for 64-bit)
88 16,777,216 (2^24 for 32-bit)
89
90 Possible values: 0 .. platform limit
91
92 Default: platform limit
93
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-06-07 17:02 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-06-07 17:02 [netfilter-nf-next:for-netdev-nf-next-26-06-07 1/15] htmldocs: Documentation/networking/ipvs-sysctl.rst:76: WARNING: Block quote ends without a blank line; unexpected unindent. [docutils] kernel test robot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox