]> git.ipfire.org Git - thirdparty/linux.git/commit
ovpn: limit keepalive values to one day
authorMarco Baffo <marco@mandelbit.com>
Wed, 22 Jul 2026 04:47:56 +0000 (06:47 +0200)
committerAntonio Quartulli <antonio@openvpn.net>
Thu, 30 Jul 2026 09:28:30 +0000 (11:28 +0200)
commit935dc3bb20e0fee89b598e10d1f5f1f500ddc79a
tree682a9dde0fc1c3a74c709a85d47f7b2a512d5e15
parent6e9f539e4f01153651dd77609b5ccadd44b74df8
ovpn: limit keepalive values to one day

Large keepalive values can overflow the delayed-work delay on 32-bit
systems, causing the keepalive worker to be repeatedly scheduled.

A correct configuration should not require such large keepalive values,
and an upper limit of one day is already generous and unnecessary in
practice. Limit both the keepalive interval and timeout to 86400 seconds.

Signed-off-by: Marco Baffo <marco@mandelbit.com>
Signed-off-by: Antonio Quartulli <antonio@openvpn.net>
Documentation/netlink/specs/ovpn.yaml
drivers/net/ovpn/netlink-gen.c