Hi David,

can you queue commit c386578f1cdb4dac230395a951f88027f64346e3 for stable?

Without it, any system with > 16 cpus and a lot of ipsec use, that
leaves xfrmN_gc_thresh set to its default, will (eventually) see
failures to create new ipsec connections.

It fixes commit 703fb94ec58e0e8769380c2877a8a34aeb5b6c97.

commit eeb1b73378b560e00ff1da2ef09fed9254f4e128 also tried to fix it,
but didn't increase the value enough and so only fixed the problem for
< 16 cpu systems.

thanks!

Reply via email to