xfrm: make gc_thresh configurable in all namespaces
authorMichal Kubecek <mkubecek@suse.cz>
Wed, 6 Feb 2013 09:46:33 +0000 (10:46 +0100)
committerSteffen Klassert <steffen.klassert@secunet.com>
Wed, 6 Feb 2013 10:36:29 +0000 (11:36 +0100)
commit8d068875caca3b507ffa8a57d521483fd4eebcc7
tree2c12e956ab40e55abbb803f4cf710f09e5d72b70
parent1f53c808502f1472bfc5829e6dd80317c7198a4a
xfrm: make gc_thresh configurable in all namespaces

The xfrm gc threshold can be configured via xfrm{4,6}_gc_thresh
sysctl but currently only in init_net, other namespaces always
use the default value. This can substantially limit the number
of IPsec tunnels that can be effectively used.

Signed-off-by: Michal Kubecek <mkubecek@suse.cz>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
include/net/netns/ipv4.h
include/net/netns/ipv6.h
net/ipv4/xfrm4_policy.c
net/ipv6/xfrm6_policy.c