rtems/rtems-libbsd
1
0
Fork 0
mirror of https://git.rtems.org/rtems-libbsd/ synced 2025-05-14 04:29:18 +08:00
Code Issues Packages Projects Releases Wiki Activity

ipsec-tools: Reduce allocated buffer size

Browse Source 
By default, pfkey allocates a 2MB buffer that is used for SPD entries.
This size is a good choice for a server system where a lot of clients
should be handled. But on our embedded systems, an application with that
much clients is unlikely and 2MB is a lot of space. So reduce that to
the default value of 128kB which should be enough for a small number of
ipsec connections.

See https://bugzilla.redhat.com/show_bug.cgi?id=607361 for more details
why the upstream project originally increased the size.

If someone really needs a bigger size, there is a option in the
configuration file of pfkey called `pfkey_buffer` that can overwrite
this value.

Closes #4621
This commit is contained in:
Christian Mauderer 2022-02-22 09:25:36 +01:00
parent 4895323e6c
commit 330f65f987
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ipsec-tools/src/libipsec/pfkey.c
View File

@ -1836,8 +1836,18 @@ pfkey_open(void)
(void)setsockopt(so, SOL_SOCKET, SO_SNDBUF, (void)setsockopt(so, SOL_SOCKET, SO_SNDBUF,
&bufsiz_wanted, sizeof(bufsiz_wanted)); &bufsiz_wanted, sizeof(bufsiz_wanted));
#ifndef __rtems__
/* Try to have have at least 2MB. If we have more, do not lower it. */ /* Try to have have at least 2MB. If we have more, do not lower it. */
bufsiz_wanted = 2 * 1024 * 1024; bufsiz_wanted = 2 * 1024 * 1024;
#else /* __rtems__ */
/*
* The bufsize_wanted has an influence on the maximum number of SPDs. We
* don't really need that much of them on an embedded system. If some
* application really needs it, this can be overwritten with the
* pfkey_buffer option in the config file.
*/
bufsiz_wanted = 128 * 1024;
#endif /* __rtems__ */
len = sizeof(bufsiz_current); len = sizeof(bufsiz_current);
ret = getsockopt(so, SOL_SOCKET, SO_RCVBUF, ret = getsockopt(so, SOL_SOCKET, SO_RCVBUF,
&bufsiz_current, &len); &bufsiz_current, &len);