netfilter: reduce netns create/delete cost
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 1 replyIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | netfilter: core: make nf_unregister_net_hooks simple wrapper againnet/ | +3 | 0 replies | |
| 2/3 | netfilter: core: remove synchronize_net call if nfqueue is usedinclude/ net/ net/ +2 more | +7 | 0 replies | |
| 3/3 | netfilter: core: free hooks with call_rcuinclude/ net/ | +43 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH nf-next 0/3] netfilter: reduce netns create/delete cost
This patch series removes all synchronize_net() calls from netfilter core to speed up net namespace create/delete rate.
Freeing of hooks is moved to call_rcu at the cost of additional 24 bytes at the end of each rule blob.
include/linux/netfilter.h | 19 +++++-- include/net/netfilter/nf_queue.h | 2 net/netfilter/core.c | 99 ++++++++++++--------------------------- net/netfilter/nf_internals.h | 2 net/netfilter/nf_queue.c | 7 -- net/netfilter/nfnetlink_queue.c | 9 --- 6 files changed, 53 insertions(+), 85 deletions(-)