Messages in this thread | | | Date | Thu, 22 Sep 2005 15:30:39 +0200 | From | Eric Dumazet <> | Subject | Re: [PATCH 0/3] netfilter : 3 patches to boost ip_tables performance |
| |
Andi Kleen a écrit : >>1) No more central rwlock protecting each table (filter, nat, mangle, raw), >> but one lock per CPU. It avoids cache line ping pongs for each packet. > > > Another useful change would be to not take the lock when there are no > rules. Currently just loading iptables has a large overhead. >
Unfortunatly there are allways rules, after the loading of iptables, at least for the "packet_filter" table.
Eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |