[Devel] Re: [PATCH v8 6/9] tcp buffer limitation: per-cgroup limit

[KAMEZAWA Hiroyuki]

On Mon,  5 Dec 2011 19:35:00 -0200
Glauber Costa <glommer at parallels.com> wrote:

> This patch uses the "tcp.limit_in_bytes" field of the kmem_cgroup to
> effectively control the amount of kernel memory pinned by a cgroup.
> 
> This value is ignored in the root cgroup, and in all others,
> caps the value specified by the admin in the net namespaces'
> view of tcp_sysctl_mem.
> 
> If namespaces are being used, the admin is allowed to set a
> value bigger than cgroup's maximum, the same way it is allowed
> to set pretty much unlimited values in a real box.
> 
> Signed-off-by: Glauber Costa <glommer at parallels.com>
> CC: David S. Miller <davem at davemloft.net>
> CC: Hiroyouki Kamezawa <kamezawa.hiroyu at jp.fujitsu.com>
> CC: Eric W. Biederman <ebiederm at xmission.com>

Reviewed-by: KAMEZAWA Hiroyuki <kamezawa.hiroyu at jp.fujitsu.com>