Antony Antony 2b68b42a5d xfrm: rate limit SA mapping change message to user space ... [ Upstream commit 4e484b3e96 ] Kernel generates mapping change message, XFRM_MSG_MAPPING, when a source port chage is detected on a input state with UDP encapsulation set. Kernel generates a message for each IPsec packet with new source port. For a high speed flow per packet mapping change message can be excessive, and can overload the user space listener. Introduce rate limiting for XFRM_MSG_MAPPING message to the user space. The rate limiting is configurable via netlink, when adding a new SA or updating it. Use the new attribute XFRMA_MTIMER_THRESH in seconds. v1->v2 change: update xfrm_sa_len() v2->v3 changes: use u32 insted unsigned long to reduce size of struct xfrm_state fix xfrm_ompat size Reported-by: kernel test robot <lkp@intel.com> accept XFRM_MSG_MAPPING only when XFRMA_ENCAP is present Co-developed-by: Thomas Egerer <thomas.egerer@secunet.com> Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> Signed-off-by: Antony Antony <antony.antony@secunet.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-01-27 11:04:49 +01:00
..
asm-generic	aio: fix use-after-free due to missing POLLFREE handling	2021-12-14 10:57:15 +01:00
drm	drm/tegra: Changes for v5.15-rc1	2021-08-26 13:05:19 +10:00
linux	xfrm: rate limit SA mapping change message to user space	2022-01-27 11:04:49 +01:00
misc	habanalabs: fix resetting args in wait for CS IOCTL	2021-09-29 12:18:48 +03:00
mtd	mtd: add OTP (one-time-programmable) erase ioctl	2021-03-28 19:24:54 +02:00
rdma	Merge branch 'sg_nents' into rdma.git for-next	2021-08-30 09:49:59 -03:00
scsi	scsi: fc: Add EDC ELS definition	2021-08-24 22:56:33 -04:00
sound	ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION	2021-09-23 09:26:40 +02:00
video
xen
Kbuild