Changeset 0b30f38 in rtems-libbsd for ipsec-tools/src/libipsec/pfkey.c

Timestamp:
02/22/22 08:25:36 (2 years ago)
Author:
Christian Mauderer <christian.mauderer@…>
Branches:
89db1bb27c9d52164a78dc2fda0a2ba9da0920ef
Children:
769c5b0
Parents:
1b6529e
git-author:
Christian Mauderer <christian.mauderer@…> (02/22/22 08:25:36)
git-committer:
Christian Mauderer <christian.mauderer@…> (02/24/22 09:20:12)
Message:

ipsec-tools: Reduce allocated buffer size

By default, pfkey allocates a 2MB buffer that is used for SPD entries.
This size is a good choice for a server system where a lot of clients
should be handled. But on our embedded systems, an application with that
much clients is unlikely and 2MB is a lot of space. So reduce that to
the default value of 128kB which should be enough for a small number of
ipsec connections.

See https://bugzilla.redhat.com/show_bug.cgi?id=607361 for more details
why the upstream project originally increased the size.

If someone really needs a bigger size, there is a option in the
configuration file of pfkey called pfkey_buffer that can overwrite
this value.

Closes #4621

(No files)

Note: See TracChangeset for help on using the changeset viewer.