From owner-freebsd-hackers Sun Feb 3 19:14:38 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id 805AE37B404; Sun, 3 Feb 2002 19:14:14 -0800 (PST) Received: from fledge.watson.org (fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.11.6/8.11.5) with SMTP id g143EDD36265; Sun, 3 Feb 2002 22:14:13 -0500 (EST) (envelope-from robert@fledge.watson.org) Date: Sun, 3 Feb 2002 22:14:12 -0500 (EST) From: Robert Watson X-Sender: robert@fledge.watson.org To: Mike Barcroft Cc: Mike Makonnen , Gaspar Chilingarov , freebsd-hackers@freebsd.org Subject: Re: fork rate limit In-Reply-To: <20020203180213.B6496@espresso.q9media.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, 3 Feb 2002, Mike Barcroft wrote: > > This means less work for you, and no need to continuously maintain diffs > > against the kernel sources. IMO it's a *very,very* bad thing to > > introduce changes into the kernel that might introduce unintended side > > effects when the problem can be solved administratively. > > Obviously he is intending his changes to be committed; hence, the > patches will be applicable to -CURRENT. This is an area where FreeBSD > is lacking. I can't understand why you wish to stifle his work. BTW, many sites find the per-uid process limits helpful in preventing fork bombs from crippling the site. The default configuration may not be sufficiently agressive, and while it's not the same as a rate limit, it does have the effect of topping them. If there is a strong desire for rate-limiting, slotting it into the current resource handling code shouldn't be hard at all -- the state can be stored in uidinfo. Robert N M Watson FreeBSD Core Team, TrustedBSD Project robert@fledge.watson.org NAI Labs, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message