Re: iptables release

[Jesper Dangaard Brouer <hawk@diku.dk>]

On Tue, 27 Nov 2007, Patrick McHardy wrote:

> I have a large number of pending patches for iptables for new
> matches and targets. I'm not going apply patches for new things
> unless they are at least in a -rc kernel, so we have a chance to
> fix mistakes. So my question is whether we're ready to release
> the current iptables -rc anytime soon (before/when 2.6.24 is
> released) or whether we're more likely going to need until 2.6.25,
> in which case I would apply them now.

What about my performance/scalability patches, do I need to wait another 
kernel cycle to see them released?

I think that, at least patch 1/2 should be applied, as its a obvious fix.

For at patch 2/2, I would like some comments on the type casting, e.g. if 
it will work on all platforms e.g. 64-bit.

I'm also working on a faster chain list search (because listing all rules 
still takes 17 sec on production server with patches applied).  That patch 
should, settle a bit in SVN before released.

Note, right now I have some spare time to work on iptables, in a week I 
don't.  Please give me some feedback on the patches.

Hilsen
   Jesper Brouer

--
-------------------------------------------------------------------
MSc. Master of Computer Science
Dept. of Computer Science, University of Copenhagen
Author of http://www.adsl-optimizer.dk
-------------------------------------------------------------------