Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob

[Cong Wang]

On Wed, Sep 6, 2017 at 8:10 PM, Haishuang Yan
<yanhaishuang@xxxxxxxxxxxxxxxxxxxx> wrote:
> Different namespace application might require different maximal number
> of TCP sockets independently of the host.

So after your patch we could have N * net->ipv4.sysctl_tcp_max_orphans
in a whole system, right? This just makes OOM easier to trigger.