Re: [PATCH 0/3] netfilter : 3 patches to boost ip_tables performance

Eric Dumazet
2005-09-22T13:30:43Z

Andi Kleen a écrit :
>>1) No more central rwlock protecting each table (filter, nat, mangle, raw),
>> but one lock per CPU. It avoids cache line ping pongs for each packet.
>
>
> Another useful change would be to not take the lock when there are no
> rules. Currently just loading iptables has a large overhead.
>

Unfortunatly there are allways rules, after the loading of iptables, at least
for the "packet_filter" table.

Eric