From mboxrd@z Thu Jan 1 00:00:00 1970 From: "David S. Miller" Subject: Re: limited number if iptable rules on 64bit hosts Date: Thu, 3 Feb 2005 11:00:49 -0800 Message-ID: <20050203110049.6b2d9c64.davem@davemloft.net> References: <20050202133851.GA9680@suse.de> <20050202222516.GA15440@suse.de> <20050202223853.GA29237@ti64.telemetry-investments.com> <20050202225258.GA15563@suse.de> <20050203111939.GI31570@suse.de> <20050203104822.05be3281.davem@davemloft.net> <20050203185928.GA22832@suse.de> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: okir@suse.de, netdev@oss.sgi.com, netfilter-devel@lists.netfilter.org, brugolsky@telemetry-investments.com To: Olaf Hering In-Reply-To: <20050203185928.GA22832@suse.de> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netdev.vger.kernel.org On Thu, 3 Feb 2005 19:59:28 +0100 Olaf Hering wrote: > On Thu, Feb 03, David S. Miller wrote: > > > The rule itself is replicated per-cpu as well to keep L2 cache > > accesses local per cpu on SMP systems. > > Andy made this change, which helped on a dual box. It might not help for Olaf's 128 cpu box though :-) I think reconsider the idea of replicating the rule itself per-cpu. Also, this thread should have begun with netfilter-devel at least on the CC:, added.