diff options
| author | Florian Westphal <fw@strlen.de> | 2025-09-21 17:45:30 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2025-10-30 12:52:45 +0100 |
| commit | 2b749f257645c54f8659bddbdb5b2ede999bec00 (patch) | |
| tree | 4b30ebf83ff5978968535c16060391b2927431c8 /net/ipv4/tcp_input.c | |
| parent | 320d80eeb22219bc1dd14780113c36e11dad7c04 (diff) | |
netfilter: conntrack: disable 0 value for conntrack_max setting
Undocumented historical artifact inherited from ip_conntrack.
If value is 0, then no limit is applied at all, conntrack table
can grow to huge value, only limited by size of conntrack hashes and
the kernel-internal upper limit on the hash chain lengths.
This feature makes no sense; users can just set
conntrack_max=2147483647 (INT_MAX).
Disallow a 0 value. This will make it slightly easier to allow
per-netns constraints for this value in a future patch.
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'net/ipv4/tcp_input.c')
0 files changed, 0 insertions, 0 deletions