On Mon, 2007-09-10 at 12:29 -0700, Christoph Lameter wrote:
quoted text
> On Wed, 5 Sep 2007, Nick Piggin wrote:
>=20
> > Implementation issues aside, the problem is there and I would like to
> > see it fixed regardless if some/most/or all users in practice don't
> > hit it.
>=20
> I am all for fixing the problem but the solution can be much simpler and=20
> more universal. F.e. the amount of tcp data in flight may be controlled=20
> via some limit so that other subsystems can continue to function even if=20
> we are overwhelmed by network traffic.

With swap over network you need not only protect other subsystems from
networking, but you also have to guarantee networking will in some form
stay functional, otherwise you'll never receive the writeout completion.

quoted text
>  Peter's approach establishes the=20
> limit by failing PF_MEMALLOC allocations.=20

I'm not failing PF_MEMALLOC allocations. I'm more stringent in failing !
PF_MEMALLOC allocations.

quoted text
> If that occurs then other=20
> subsystems (like the disk, or even fork/exec or memory management=20
> allocation) will no longer operate since their allocations no longer=20
> succeed which will make the system even more fragile and may lead to=20
> subsequent failures.

Failing allocations should never be a stability problem, we have the
fault-injection framework which allows allocations to fail randomly -
this should never crash the kernel - if it does its a BUG.