<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Can you open a ticket at <a class="moz-txt-link-freetext" href="https://bugs.centos.org/main_page.php">https://bugs.centos.org/main_page.php</a> ?<br>
<br>
<div class="moz-cite-prefix">On 12/12/19 2:03 PM, Matt Dees wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAEDPm3O5OnE=E3rF6hvJEPnXP=P3D_ub1zsz62dv+-d7EM2+ZQ@mail.gmail.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div dir="ltr">Hi All!
<div><br>
</div>
<div>We have been dealing with a memory leak in the kernel for
IKEv2 and IPSec connections relating to a memory leak in xfrm
support on both el8 and el7. The symptom of this issue is that
memory will continue allocating in slab over time making a box
oom after too many connections.</div>
<div><br>
</div>
<div>As per some external discussions I am sending the patch +
bug report on to this list. It has already been accepted into
upstream kernels (4.19 included) and is a pretty straight
forward backport. I have tested and installed this on a few
centos8 systems to validate that this does indeed solve the
memory leak issue.</div>
<div><br>
</div>
<div>rbz# 1780470</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
CentOS-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:CentOS-devel@centos.org">CentOS-devel@centos.org</a>
<a class="moz-txt-link-freetext" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.centos.org_mailman_listinfo_centos-2Ddevel&d=DwICAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=saKpAELEHCBOI8osWTM5BB10VLb8AkhDrCbaZcDQc4g&s=3S9uaZeqZkMHbLszrGxDeSbeplIPTVHDH9fLr9HGMrc&e=">https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.centos.org_mailman_listinfo_centos-2Ddevel&d=DwICAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=OAMtP0DWou0nlXG7Kmxo2enjXJfwb1DXS9fwcaESuTE&m=saKpAELEHCBOI8osWTM5BB10VLb8AkhDrCbaZcDQc4g&s=3S9uaZeqZkMHbLszrGxDeSbeplIPTVHDH9fLr9HGMrc&e=</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Pat Riehecky
Fermi National Accelerator Laboratory
<a class="moz-txt-link-abbreviated" href="http://www.fnal.gov">www.fnal.gov</a>
<a class="moz-txt-link-abbreviated" href="http://www.scientificlinux.org">www.scientificlinux.org</a></pre>
</body>
</html>