linux.git/Documentation/networking/ipvs-sysctl.rst, branch v7.2-rc2

ipvs: fix doc syntax for conn_max sysctl

2026-06-14T10:51:55+00:00

Fix the docutils error reported by kernel test robot
for the new conn_max sysctl:

Documentation/networking/ipvs-sysctl.rst:76: WARNING: Block quote ends
without a blank line; unexpected unindent. [docutils]
Documentation/networking/ipvs-sysctl.rst:76: ERROR: Unexpected section
title or transition.

Reported-by: kernel test robot 
Closes: https://lore.kernel.org/oe-kbuild-all/202606071851.Dc1H7hOO-lkp@intel.com/
Fixes: 4a15044a2b06 ("ipvs: add conn_max sysctl to limit connections")
Signed-off-by: Julian Anastasov 
Signed-off-by: Pablo Neira Ayuso

ipvs: add conn_max sysctl to limit connections

2026-06-05T11:11:54+00:00

Currently, we are using atomic_t to track the number of
connections. On 64-bit setups with large memory there is
a risk this counter to overflow. Also, setups with many
containers may need to tune the limit for connections.

Add sysctl control to limit the number of connections to
1,073,741,824 (64-bit) and 16,777,216 (32-bit).
Depending on the admin's privilege, the value is
used to change a soft or hard limit allowing
unprivileged admins to change the soft limit in
range determined by privileged admins.

Link: https://sashiko.dev/#/patchset/20260523172715.94795-1-ja%40ssi.bg
Link: https://sashiko.dev/#/patchset/20260430074420.26697-7-ja%40ssi.bg
Link: https://sashiko.dev/#/patchset/20260522105546.13732-1-ja%40ssi.bg
Signed-off-by: Julian Anastasov 
Signed-off-by: Pablo Neira Ayuso

ipvs: add conn_lfactor and svc_lfactor sysctl vars

2026-04-10T10:16:26+00:00

Allow the default load factor for the connection and service tables
to be configured.

Signed-off-by: Julian Anastasov 
Signed-off-by: Florian Westphal

ipvs: run_estimation should control the kthread tasks

2022-12-10T21:44:43+00:00

Change the run_estimation flag to start/stop the kthread tasks.

Signed-off-by: Julian Anastasov 
Cc: yunhong-cgl jiang 
Cc: "dust.li" 
Reviewed-by: Jiri Wiesner 
Signed-off-by: Pablo Neira Ayuso

ipvs: add est_cpulist and est_nice sysctl vars

2022-12-10T21:44:43+00:00

Allow the kthreads for stats to be configured for
specific cpulist (isolation) and niceness (scheduling
priority).

Signed-off-by: Julian Anastasov 
Cc: yunhong-cgl jiang 
Cc: "dust.li" 
Reviewed-by: Jiri Wiesner 
Signed-off-by: Pablo Neira Ayuso

netfilter: ipvs: Fix reuse connection if RS weight is 0

2021-11-08T10:42:47+00:00

We are changing expire_nodest_conn to work even for reused connections when
conn_reuse_mode=0, just as what was done with commit dc7b3eb900aa ("ipvs:
Fix reuse connection if real server is dead").

For controlled and persistent connections, the new connection will get the
needed real server depending on the rules in ip_vs_check_template().

Fixes: d752c3645717 ("ipvs: allow rescheduling of new connections when port reuse is detected")
Co-developed-by: Chuanqi Liu 
Signed-off-by: Chuanqi Liu 
Signed-off-by: yangxingwu 
Acked-by: Simon Horman 
Acked-by: Julian Anastasov 
Signed-off-by: Pablo Neira Ayuso

ipvs: add sysctl_run_estimation to support disable estimation

2021-10-07T17:52:58+00:00

estimation_timer will iterate the est_list to do estimation
for each ipvs stats. When there are lots of services, the
list can be very large.
We found that estimation_timer() run for more then 200ms on a
machine with 104 CPU and 50K services.

yunhong-cgl jiang report the same phenomenon before:
https://www.spinics.net/lists/lvs-devel/msg05426.html

In some cases(for example a large K8S cluster with many ipvs services),
ipvs estimation may not be needed. So adding a sysctl blob to allow
users to disable this completely.

Default is: 1 (enable)

Cc: yunhong-cgl jiang 
Signed-off-by: Dust Li 
Acked-by: Julian Anastasov 
Acked-by: Simon Horman 
Signed-off-by: Pablo Neira Ayuso

Documentation: networking: ipvs-sysctl: drop doubled word

2020-07-05T00:46:21+00:00

Drop the doubled word "that".

Signed-off-by: Randy Dunlap 
Cc: Jonathan Corbet 
Cc: linux-doc@vger.kernel.org
Cc: "David S. Miller" 
Cc: Jakub Kicinski 
Cc: netdev@vger.kernel.org
Signed-off-by: David S. Miller

docs: networking: convert ipvs-sysctl.txt to ReST

2020-04-28T21:40:18+00:00

- add SPDX header;
- add a document title;
- mark lists as such;
- mark code blocks and literals as such;
- adjust identation, whitespaces and blank lines;
- add to networking/index.rst.

Signed-off-by: Mauro Carvalho Chehab 
Acked-by: Simon Horman 
Signed-off-by: David S. Miller