Re: [PATCH net-next v3 0/3] Conntrack offload debuggability improvements

[Pablo Neira Ayuso <pablo@netfilter.org>]

On Tue, May 17, 2022 at 07:59:06PM +0300, Vlad Buslov wrote:
> Current conntrack offload implementation doesn't provide much visibility
> and control over offload code. The code just tries to offload new flows,
> even if current amount of flows is beyond what can be reasonably
> processed by target hardware. On top of that there is no way to
> determine current load on workqueues that process the offload tasks
> which makes it hard to debug the cases where offload is significantly
> delayed due to rate of new connections being higher than driver or
> hardware offload rate.
> 
> Improve the debuggability situation by implementing following new
> functionality:
> 
> - Sysctls for current total count of offloaded flow and
>   user-configurable maximum. Capping the amount of offloaded flows can
>   be useful for the allocations of hardware resources. Note that the
>   flow can still be offloaded afterwards via 'refresh' mechanism if
>   total hardware count.
> 
> - Procfs for current total of workqueue tasks for nf_ft_offload_add,
>   nf_ft_offload_del and nf_ft_offload_stats queues. This allows
>   visibility for flow offload delay due to system scheduling offload
>   tasks faster than driver/hardware can process them.

Series applied, thanks!