]> git.baikalelectronics.ru Git - kernel.git/commit
flowcache: Make flow cache name space aware
authorFan Du <fan.du@windriver.com>
Sat, 18 Jan 2014 01:55:27 +0000 (09:55 +0800)
committerSteffen Klassert <steffen.klassert@secunet.com>
Wed, 12 Feb 2014 06:02:11 +0000 (07:02 +0100)
commitf87ce316a7a36def970597a22ab8ab7eb3c8ca1b
treeaed605af36fd62ad4c5daeeac095312c96f66996
parent9c35bba06382a9963d0dbf6383d47db910a4d0f1
flowcache: Make flow cache name space aware

Inserting a entry into flowcache, or flushing flowcache should be based
on per net scope. The reason to do so is flushing operation from fat
netns crammed with flow entries will also making the slim netns with only
a few flow cache entries go away in original implementation.

Since flowcache is tightly coupled with IPsec, so it would be easier to
put flow cache global parameters into xfrm namespace part. And one last
thing needs to do is bumping flow cache genid, and flush flow cache should
also be made in per net style.

Signed-off-by: Fan Du <fan.du@windriver.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
include/net/flow.h
include/net/flowcache.h [new file with mode: 0644]
include/net/netns/xfrm.h
net/core/flow.c
net/xfrm/xfrm_policy.c
security/selinux/include/xfrm.h