Re: [PATCH v2] memcg: enable accounting for nft objects
Vasily Averin <vasily.averin@linux.dev> wrote: > nftables replaces iptables, but it lacks memcg accounting. > > This patch account most of the memory allocation associated with nft > and should protect the host from misusing nft inside a memcg restricted > container.