Re: Fwd: Memory exhaust issue with only IPsec policies configuredon continuous traffic

[Eric Dumazet]

On Thu, 2012-05-10 at 07:27 +0200, Eric Dumazet wrote:

> Yep, we can use DST_NOCACHE
> 

Please try following patch :

diff --git a/net/ipv4/route.c b/net/ipv4/route.c
index 5773f5d..172c251 100644
--- a/net/ipv4/route.c
+++ b/net/ipv4/route.c
@@ -2896,6 +2896,7 @@ struct dst_entry *ipv4_blackhole_route(struct net *net, struct dst_entry *dst_or
 	if (rt) {
 		struct dst_entry *new = &rt->dst;
 
+		new->flags |= DST_NOCACHE;
 		new->__use = 1;
 		new->input = dst_discard;
 		new->output = dst_discard;


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/