> I have been mulling over this issue for some time.  My current thinking
> is that pending some more well thought out mechanism, the right thing
> to do here is to detect the DOS and react to that, not to handicap
> the caching in general.
> 
> The easiest way to detect this DOS is probably to keep track of the
> 
>       namecache entries
>       -----------------
>       live vnodes
> 
> ratio, and enforce an upper limit on it.

That seems like a reasonable approach.

If you want to include the other attack I mentioned (I just tried it,
got up to > 160000 vnodes), then you have to exclude vnodes that are
only live because of v_cache_src entries from the count.

BTW: You still haven't committed the v_id patch I sent you in May.  Is
there any specific reason for this?


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to