Re: [PATCH] ipv6: enable net.ipv6.route sysctls in network namespace

Jakub Kicinski [off-list ref] wrote:

On Tue, 21 Sep 2021 09:22:04 +0300 Alexander Kuznetsov wrote:

quoted

We want to increase route cache size in network namespace
created with user namespace. Currently ipv6 route settings
are disabled for non-initial network namespaces.
Since routes are per network namespace it is safe
to enable these sysctls.

Are routes accounted towards memcg or something like that?

Otherwise userns could start eating up memory by cranking the limit
up to 11 and just adds a gazillion routes?