diff options
| author | Marco Baffo <marco@mandelbit.com> | 2026-07-22 06:47:56 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@openvpn.net> | 2026-07-30 11:28:30 +0200 |
| commit | 935dc3bb20e0fee89b598e10d1f5f1f500ddc79a (patch) | |
| tree | 682a9dde0fc1c3a74c709a85d47f7b2a512d5e15 /Documentation | |
| parent | 6e9f539e4f01153651dd77609b5ccadd44b74df8 (diff) | |
ovpn: limit keepalive values to one day
Large keepalive values can overflow the delayed-work delay on 32-bit
systems, causing the keepalive worker to be repeatedly scheduled.
A correct configuration should not require such large keepalive values,
and an upper limit of one day is already generous and unnecessary in
practice. Limit both the keepalive interval and timeout to 86400 seconds.
Signed-off-by: Marco Baffo <marco@mandelbit.com>
Signed-off-by: Antonio Quartulli <antonio@openvpn.net>
Diffstat (limited to 'Documentation')
| -rw-r--r-- | Documentation/netlink/specs/ovpn.yaml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Documentation/netlink/specs/ovpn.yaml b/Documentation/netlink/specs/ovpn.yaml index b0c782e59a32..ac50d1d7c00a 100644 --- a/Documentation/netlink/specs/ovpn.yaml +++ b/Documentation/netlink/specs/ovpn.yaml @@ -118,12 +118,16 @@ attribute-sets: doc: >- The number of seconds after which a keep alive message is sent to the peer + checks: + max: 86400 - name: keepalive-timeout type: u32 doc: >- The number of seconds from the last activity after which the peer is assumed dead + checks: + max: 86400 - name: del-reason type: u32 |