On Tue, 27 Mar 2007, Ismaël BALLO wrote:
I use ipset 2.2.9a on kernel 2.6.19.7 compiled (from kernel.org) with
these options
(iptables 1.3.6)
I have a minor bug (non blocking) when I load ipsets ( it seems it
happens when I have a large numbers of bindings)
Mar 23 14:45:10 fwa01 kernel: BUG: sleeping function called from
invalid context at mm/slab.c:3007
Mar 23 14:45:10 fwa01 kernel: in_atomic():1, irqs_disabled():0
Mar 23 14:45:10 fwa01 kernel: [<c0158e6c>] kmem_cache_alloc+0x1b/0x55
Mar 23 14:45:10 fwa01 kernel: [<f89a77b8>] ip_set_hash_add+0xe7/0x142
[ip_set]
That's due to a stupid bug of mine in the flag of kmalloc. The fixed
kernel source can be downloaded from the svn repository or as the
patch-o-matic-ng-20070328.tar.bz2 snapshot from the ipset webpage. Thank
you for the bugreport.
and other : What can we chose best parameters for hashsize, probes, resize ?
There is no golden path: either you pay by memory for speed (i.e. large
hashsize, small probes, large resize percentage) or reversed. The defaults
of the iphash and nethash types are towards the other end, i.e. spare with
the memory requirement and loose thus speed.
Best regards,
Jozsef
-
E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
|