[PATCH nf-next v2 0/3] ipv6: switch nft_fib_ipv6 to fib6_lookup

[Florian Westphal <fw@strlen.de>]

Existing code works but it requires a temporary dst object that is
released again right away.

Switch to fib6_lookup + RT6_LOOKUP_F_DST_NOREF: no need for temporary dst
objects and refcount overhead anymore.

Provides ~13% improvement in match performance.

First two patches are preparations:
We need to export fib6_lookup, only alternative would be an indirection
via the ipv6 stub, but thats expensive.

Also, nft_fib_ipv6 uses a helper that requires a ipv6 dst, but we no
longer have that.  Split this and let the new helper work without the
dst object.

Changes since v1:
- fix compiler error without ipv6 multi-table support
- split ipv6_anycast_destination, use the new helper

Florian Westphal (3):
  ipv6: export fib6_lookup for nft_fib_ipv6
  ipv6: make ipv6_anycast_destination logic useable without dst_entry
  netfilter: nft_fib_ipv6: switch to fib6_lookup

 include/net/ip6_route.h           | 15 ++++--
 net/ipv6/fib6_rules.c             |  3 ++
 net/ipv6/ip6_fib.c                |  3 ++
 net/ipv6/netfilter/nft_fib_ipv6.c | 79 +++++++++++++++++++------------
 4 files changed, 66 insertions(+), 34 deletions(-)

-- 
2.52.0