linux.git/include/net/netns/ipv4.h, branch v2.6.30

netns: ipmr: declare reg_vif_num per-namespace

2009-01-22T21:57:40+00:00

Preliminary work to make IPv4 multicast routing netns-aware.

Declare variable 'reg_vif_num' per-namespace, move into struct netns_ipv4.

At the moment, this variable is only referenced in init_net.

Signed-off-by: Benjamin Thery 
Signed-off-by: David S. Miller

netns: ipmr: declare mroute_do_assert and mroute_do_pim per-namespace

2009-01-22T21:57:40+00:00

Preliminary work to make IPv4 multicast routing netns-aware.

Declare IPv multicast routing variables 'mroute_do_assert' and
'mroute_do_pim' per-namespace in struct netns_ipv4.

At the moment, these variables are only referenced in init_net.

Signed-off-by: Benjamin Thery 
Signed-off-by: David S. Miller

netns: ipmr: declare counter cache_resolve_queue_len per-namespace

2009-01-22T21:57:39+00:00

Preliminary work to make IPv4 multicast routing netns-aware.

Declare variable cache_resolve_queue_len per-namespace: move it into
struct netns_ipv4.

This variable counts the number of unresolved cache entries queued in the
list mfc_unres_queue. This list is kept global to all netns as the number
of entries per namespace is limited to 10 (hardcoded in routine
ipmr_cache_unresolved).
Entries belonging to different namespaces in mfc_unres_queue will be
identified by matching the mfc_net member introduced previously in
struct mfc_cache.

Keeping this list global to all netns, also allows us to keep a single
timer (ipmr_expire_timer) to handle their expiration.
In some places cache_resolve_queue_len value was tested for arming
or deleting the timer. These tests were equivalent to testing
mfc_unres_queue value instead and are replaced in this patch.

At the moment, cache_resolve_queue_len is only referenced in init_net.

Signed-off-by: Benjamin Thery 
Signed-off-by: David S. Miller

netns: ipmr: dynamically allocate mfc_cache_array

2009-01-22T21:57:38+00:00

Preliminary work to make IPv4 multicast routing netns-aware.

Dynamically allocate IPv4 multicast forwarding cache, mfc_cache_array,
and move it to struct netns_ipv4.

At the moment, mfc_cache_array is only referenced in init_net.

Signed-off-by: Benjamin Thery 
Signed-off-by: David S. Miller

netns: ipmr: dynamically allocate vif_table

2009-01-22T21:57:34+00:00

Preliminary work to make IPv6 multicast routing netns-aware.

Dynamically allocate interface table vif_table and move it to
struct netns_ipv4, and update MIF_EXISTS() macro.

At the moment, vif_table is only referenced in init_net.

Signed-off-by: Benjamin Thery 
Signed-off-by: David S. Miller

netns: ipmr: allocate mroute_socket per-namespace.

2009-01-22T21:57:34+00:00

Preliminary work to make IPv4 multicast routing netns-aware.

Make IPv4 multicast routing mroute_socket per-namespace,
moves it into struct netns_ipv4.

At the moment, mroute_socket is only referenced in init_net.

Signed-off-by: Benjamin Thery 
Signed-off-by: David S. Miller

net: implement emergency route cache rebulds when gc_elasticity is exceeded

2008-10-28T00:06:14+00:00

This is a patch to provide on demand route cache rebuilding.  Currently, our
route cache is rebulid periodically regardless of need.  This introduced
unneeded periodic latency.  This patch offers a better approach.  Using code
provided by Eric Dumazet, we compute the standard deviation of the average hash
bucket chain length while running rt_check_expire.  Should any given chain
length grow to larger that average plus 4 standard deviations, we trigger an
emergency hash table rebuild for that net namespace.  This allows for the common
case in which chains are well behaved and do not grow unevenly to not incur any
latency at all, while those systems (which may be being maliciously attacked),
only rebuild when the attack is detected.  This patch take 2 other factors into
account:
1) chains with multiple entries that differ by attributes that do not affect the
hash value are only counted once, so as not to unduly bias system to rebuilding
if features like QOS are heavily used
2) if rebuilding crosses a certain threshold (which is adjustable via the added
sysctl in this patch), route caching is disabled entirely for that net
namespace, since constant rebuilding is less efficient that no caching at all

Tested successfully by me.

Signed-off-by: Neil Horman 
Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

netfilter: netns nat: per-netns bysource hash

2008-10-08T09:35:11+00:00

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

netfilter: netns nat: per-netns NAT table

2008-10-08T09:35:10+00:00

Same story as with iptable_filter, iptables_raw tables.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

netns: place rt_genid into struct net

2008-07-06T02:04:32+00:00

Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller