Subject: Re: [PATCH] ipv6: enable net.ipv6.route sysctls in network namespace

From: Florian Westphal <[email-masked]>
Date: Tue, 21 Sep 2021 17:32:03 +0200

Jakub Kicinski <[email-masked]> wrote:
> On Tue, 21 Sep 2021 09:22:04 +0300 Alexander Kuznetsov wrote:
> > We want to increase route cache size in network namespace
> > created with user namespace. Currently ipv6 route settings
> > are disabled for non-initial network namespaces.
> > Since routes are per network namespace it is safe
> > to enable these sysctls.

Are routes accounted towards memcg or something like that?

Otherwise userns could start eating up memory by cranking the limit
up to 11 and just adds a gazillion routes?