Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next
Steffen Klassert says: ==================== pull request (net-next): ipsec-next 2014-09-25 1) Remove useless hash_resize_mutex in xfrm_hash_resize(). This mutex is used only there, but xfrm_hash_resize() can't be called concurrently at all. From Ying Xue. 2) Extend policy hashing to prefixed policies based on prefix lenght thresholds. From Christophe Gouault. 3) Make the policy hash table thresholds configurable via netlink. From Christophe Gouault. 4) Remove the maximum authentication length for AH. This was needed to limit stack usage. We switched already to allocate space, so no need to keep the limit. From Herbert Xu. ==================== Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
@@ -13,6 +13,19 @@ struct ctl_table_header;
|
||||
struct xfrm_policy_hash {
|
||||
struct hlist_head *table;
|
||||
unsigned int hmask;
|
||||
u8 dbits4;
|
||||
u8 sbits4;
|
||||
u8 dbits6;
|
||||
u8 sbits6;
|
||||
};
|
||||
|
||||
struct xfrm_policy_hthresh {
|
||||
struct work_struct work;
|
||||
seqlock_t lock;
|
||||
u8 lbits4;
|
||||
u8 rbits4;
|
||||
u8 lbits6;
|
||||
u8 rbits6;
|
||||
};
|
||||
|
||||
struct netns_xfrm {
|
||||
@@ -41,6 +54,7 @@ struct netns_xfrm {
|
||||
struct xfrm_policy_hash policy_bydst[XFRM_POLICY_MAX * 2];
|
||||
unsigned int policy_count[XFRM_POLICY_MAX * 2];
|
||||
struct work_struct policy_hash_work;
|
||||
struct xfrm_policy_hthresh policy_hthresh;
|
||||
|
||||
|
||||
struct sock *nlsk;
|
||||
|
||||
Reference in New Issue
Block a user