: netfilter update
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest12 patches 10 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/12 | : Don't try to do any random dropping | +0 | 0 replies | |
| 2/12 | : add sysctl to read out the number of current connectionsnet/ | +8 | 0 replies | |
| 3/12 | : Shuffle conntrack structure for better cacheline behavior | +0 | 0 replies | |
| 4/12 | : kill struct ip_nat_hashnet/ | +27 | 0 replies | |
| 5/12 | : kill struct nf_ct_infoinclude/ include/ include/ +11 more | +53 | 0 replies | |
| 6/12 | : Use u_int16_t for initialized/num_manips in struct ip_nat_info | +0 | 0 replies | |
| 7/12 | : Keep conntrack/nat protocols in array instead of linked listinclude/ include/ include/ +9 more | +58 | 0 replies | |
| 8/12 | : lookup sockets for incoming packets in ipt_ownerinclude/ net/ net/ +1 more | +82 | 0 replies | |
| 9/12 | : Cleanup ctstatnet/ net/ | +17 | 0 replies | |
| 10/12 | : Fix two broken assertions | +0 | 0 replies | |
| 11/12 | : Fix invalid return values in sctp_new | +0 | 0 replies | |
| 12/12 | : add comment matchnet/ net/ | +60 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 2.6 0/12]: netfilter update
Hi Dave,
following are 12 mostly random netfilter patches for 2.6. You can also pull all changes from bk://212.42.230.204/2.6-netfilter
Regards
Patrick
[email protected], 2004-09-20 11:55:28+02:00, [email protected]
[NETFILTER]: add comment match
2.4 version by Brad Fisher <[email protected]>
[email protected], 2004-09-20 11:54:00+02:00, [email protected]
[NETFILTER]: Fix invalid return values in sctp_new
[email protected], 2004-09-20 11:52:16+02:00, [email protected]
[NETFILTER]: Fix two broken assertions
[email protected], 2004-09-19 18:18:43+02:00, [email protected]
[NETFILTER]: Cleanup ctstat
This patch simply adds a macro to increase the statistics. And it changes icmp_error to error in struct ip_conntrack_stat in order to adopt to the tcp-windowtracking changes.
Based on patch by Pablo Neira.
[email protected], 2004-09-19 18:08:05+02:00, [email protected]
[NETFILTER]: lookup sockets for incoming packets in ipt_owner
[email protected], 2004-09-19 16:28:21+02:00, [email protected]
[NETFILTER]: Keep conntrack/nat protocols in array instead of linked list
[email protected], 2004-09-19 15:33:35+02:00, [email protected]
[NETFILTER]: Use u_int16_t for initialized/num_manips in structip_nat_info
[email protected], 2004-09-19 15:29:24+02:00, [email protected]
[NETFILTER]: kill struct nf_ct_info, saves five pointers per conntrack
The relationship of the skb to the conntrack is stored in a new field in the skb.
[email protected], 2004-09-19 00:05:29+02:00, [email protected]
[NETFILTER]: kill struct ip_nat_hash, saves two pointers per conntrack
The back-pointer is not needed when using list.h macros.
[email protected], 2004-09-18 23:44:40+02:00, [email protected]
[NETFILTER]: Shuffle conntrack structure for better cacheline behavior
Every time we walk the conntrack hashtable list, we hit the same cacheline that is dirtied by the use of the conntrack entry. Shuffling these entries to the end should help this (sizeof(struct ip_conntrack)) > cacheline size).
[email protected], 2004-09-18 23:27:31+02:00, [email protected]
[NETFILTER]: add sysctl to read out the number of current connections
Apparently a lot of scripts use a construct like
"cat /proc/net/ip_conntrack | wc -l"
which has a negative impact on system performance due to all the locking required.
[email protected], 2004-09-18 23:18:23+02:00, [email protected]
[NETFILTER]: Don't try to do any random dropping since we now use
jenkins hash