Re: [PATCH] ipv4: Namespaceify tcp_max_orphans knob
From: Cong Wang
Date: Fri Sep 08 2017 - 18:14:28 EST
On Wed, Sep 6, 2017 at 8:10 PM, Haishuang Yan
> Different namespace application might require different maximal number
> of TCP sockets independently of the host.
So after your patch we could have N * net->ipv4.sysctl_tcp_max_orphans
in a whole system, right? This just makes OOM easier to trigger.