Eric Garver reports:
If this restart is triggered it causes rules to be duplicated. We send
the same batch again.
... and indeed, if the batch isn't doing a full replace, we cannot resend.
Therefore, remove the restart logic again.
1. If user passed --echo, use a 4mb buffer.
2. assume each element in the batch will result in a 1k
notification and further increase limits if thats not enough.
This still passes on s390x (the platform that did not work with
the former, more conservative estimate).
Next option (aside from increasing the guess again ...) is to add a
commandline switch to nftables to allow userspace to override the
buffer size.
Fixes: 877baf9538f66f8f238 ("src: mnl: retry when we hit -ENOBUFS")
Reported-by: Eric Garver <eric@xxxxxxxxxxx>
Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
---
src/mnl.c | 21 ++++++++++-----------
1 file changed, 10 insertions(+), 11 deletions(-)
diff --git a/src/mnl.c b/src/mnl.c
index 9c1f5356c9b9..d664564e16af 100644
--- a/src/mnl.c
+++ b/src/mnl.c
@@ -311,8 +311,6 @@ int mnl_batch_talk(struct netlink_ctx *ctx, struct list_head *err_list,
int ret, fd = mnl_socket_get_fd(nl), portid = mnl_socket_get_portid(nl);
uint32_t iov_len = nftnl_batch_iovec_len(ctx->batch);
char rcv_buf[MNL_SOCKET_BUFFER_SIZE];
- unsigned int enobuf_restarts = 0;
- size_t avg_msg_size, batch_size;
const struct sockaddr_nl snl = {
.nl_family = AF_NETLINK
};
@@ -321,17 +319,22 @@ int mnl_batch_talk(struct netlink_ctx *ctx, struct list_head *err_list,
.tv_usec = 0
};
struct iovec iov[iov_len];
- unsigned int scale = 4;
struct msghdr msg = {};
fd_set readfds;
mnl_set_sndbuffer(ctx->nft->nf_sock, ctx->batch);
- batch_size = mnl_nft_batch_to_msg(ctx, &msg, &snl, iov, iov_len);
- avg_msg_size = div_round_up(batch_size, num_cmds);
+ mnl_nft_batch_to_msg(ctx, &msg, &snl, iov, iov_len);
-restart:
- mnl_set_rcvbuffer(ctx->nft->nf_sock, num_cmds * avg_msg_size * scale);
+ if (nft_output_echo(&ctx->nft->output)) {
+ size_t buffer_size = MNL_SOCKET_BUFFER_SIZE * 1024;
+ size_t new_buffer_size = num_cmds * 1024;
+
+ if (new_buffer_size > buffer_size)
+ buffer_size = new_buffer_size;
+
+ mnl_set_rcvbuffer(ctx->nft->nf_sock, buffer_size);
+ }
ret = mnl_nft_socket_sendmsg(ctx, &msg);
if (ret == -1)
@@ -351,10 +354,6 @@ restart:
ret = mnl_socket_recvfrom(nl, rcv_buf, sizeof(rcv_buf));
if (ret == -1) {
- if (errno == ENOBUFS && enobuf_restarts++ < 3) {
- scale *= 2;
- goto restart;
- }
return -1;
}
--
2.21.0
