Li RongQing <lirongq...@baidu.com> wrote: > when system forks a process with CLONE_NEWNET flag under the > high memory pressure, it will trigger memory reclaim and stall > for a long time because nf_ct_alloc_hashtable need to allocate > high-order memory at that time. The calltrace as below:
> nf_ct_alloc_hashtable > nf_conntrack_init_net This call trace is from a kernel < 4.7. commit 56d52d4892d0e478a005b99ed10d0a7f488ea8c1 netfilter: conntrack: use a single hashtable for all namespaces removed per-netns hash table.
