Re: Chain Sorting

[Pablo Neira Ayuso <pablo@netfilter.org>]

Paul C. Diem wrote:
> In my quest to speed up the TC_INIT, I found that the libiptc.c searches the
> chain list for the alphabetically correct place to insert chains as it
> converts from the blob to the chain list. However, when adding a new chain
> in TC_CREATE_CHAIN, it simply adds the new chain to the end of the list.
> 
> This leaves the chains unsorted when written back to the kernel and uses
> lots of cycles when loading. I patched libiptc.c to simply add chains to the
> end of the list when loading and use iptc_insert_chain in TC_CREATE_CHAIN to
> insert newly created chains into the proper order. My
> TC_INIT time with 4106 chains went from about 1.09 real seconds to about
> 0.05 real seconds.

This seems interesting, please, could send post the patch?

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of 
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris