From: Patrick McHardy <kaber@trash.net>
To: Jan Engelhardt <jengelh@computergmbh.de>
Cc: Pablo Neira Ayuso <pablo@netfilter.org>,
Phil Oester <kernel@linuxace.com>,
Netfilter Development Mailinglist
<netfilter-devel@vger.kernel.org>
Subject: Re: [RFC] generic CONNTRACK target
Date: Tue, 15 Jan 2008 15:11:56 +0100 [thread overview]
Message-ID: <478CBF2C.9070005@trash.net> (raw)
In-Reply-To: <Pine.LNX.4.64.0801151317010.30034@fbirervta.pbzchgretzou.qr>
Jan Engelhardt wrote:
> On Jan 15 2008 07:40, Patrick McHardy wrote:
>> This doesn't seem to actually consolidate any code, just put
>> it all in one file and dispatch based on the desired operation.
>> Whats the advantage over the existing modules?
>
> I could imagine it is the "less .ko overhead" thing as I tried with
> xt_REJECT (12 kb, replacing a 24kb ipt_+ip6t_REJECT solution) and xt_ah.
>
> Also, as noticed in http://lkml.org/lkml/2007/12/31/59, modules are
> aligned at page boundaries, which means
>
> ipt_REJECT.ko 11121 bytes uses up 12288 bytes of RAM.
> ip6t_REJECT.ko 12107 bytes also uses up 12288 bytes of RAM.
> (All values on x86_32).
Well, don't use module then. Putting everything in one module is
a rather strange way of doing this though :)
next prev parent reply other threads:[~2008-01-15 14:12 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-01-14 16:19 [RFC] generic CONNTRACK target Pablo Neira Ayuso
2008-01-14 16:29 ` Pablo Neira Ayuso
2008-01-14 17:00 ` Jan Engelhardt
2008-01-15 6:40 ` Patrick McHardy
2008-01-15 12:27 ` Jan Engelhardt
2008-01-15 14:11 ` Patrick McHardy [this message]
2008-01-15 6:42 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=478CBF2C.9070005@trash.net \
--to=kaber@trash.net \
--cc=jengelh@computergmbh.de \
--cc=kernel@linuxace.com \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.