Skip site navigation (1)Skip section navigation (2)
Date:      28 Sep 1999 12:29:17 -0000
From:      Ville-Pertti Keinonen <will@iki.fi>
To:        phk@critter.freebsd.dk
Cc:        current@FreeBSD.ORG, culverk@culverk.student.umd.edu
Subject:   Re: just found this
Message-ID:  <19990928122917.16937.qmail@ns.oeno.com>
In-Reply-To: <25751.938520138@critter.freebsd.dk> (message from Poul-Henning Kamp on Tue, 28 Sep 1999 14:02:18 %2B0200)

next in thread | previous in thread | raw e-mail | index | archive | help

> I have been mulling over this issue for some time.  My current thinking
> is that pending some more well thought out mechanism, the right thing
> to do here is to detect the DOS and react to that, not to handicap
> the caching in general.
> 
> The easiest way to detect this DOS is probably to keep track of the
> 
> 	namecache entries
> 	-----------------
> 	live vnodes
> 
> ratio, and enforce an upper limit on it.

That seems like a reasonable approach.

If you want to include the other attack I mentioned (I just tried it,
got up to > 160000 vnodes), then you have to exclude vnodes that are
only live because of v_cache_src entries from the count.

BTW: You still haven't committed the v_id patch I sent you in May.  Is
there any specific reason for this?


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990928122917.16937.qmail>