[RFD] L2 Network namespace infrastructure

Eric W. Biederman ebiederm at xmission.com
Sat Jun 23 13:31:52 PDT 2007


Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006 at gmx.net> writes:

> Can one namespace DoS other namespaces' access to the routing cache?
> Two scenarios come to mind:
> * provoking hash collisions
> * lock contention (sorry, haven't checked whether/how we do locking)

My initial expectation is that the protections we have to prevent one user from
performing a DoS on another user generally cover the cases between namespaces as
well.

Further in general global caches and global resource management is more efficient
then per namespace management.

Eric


More information about the Containers mailing list