Re: [PATCH 0/3] netfilter : 3 patches to boost ip_tables performance

Andi Kleen
2005-09-22T13:03:23Z

> 1) No more central rwlock protecting each table (filter, nat, mangle, raw),
> but one lock per CPU. It avoids cache line ping pongs for each packet.

Another useful change would be to not take the lock when there are no
rules. Currently just loading iptables has a large overhead.

-Andi