From: Jesper Dangaard Brouer <hawk@diku.dk>
To: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [RFC] Inter-match communication cache
Date: Wed, 19 Sep 2012 17:38:43 +0200 (CEST) [thread overview]
Message-ID: <Pine.LNX.4.64.1209191720490.12601@ask.diku.dk> (raw)
In-Reply-To: <alpine.DEB.2.00.1209182232460.5113@blackhole.kfki.hu>
On Tue, 18 Sep 2012, Jozsef Kadlecsik wrote:
> I propose a small cache for inter-match communication purpose:
>
> diff --git a/include/linux/netfilter/x_tables.h b/include/linux/netfilter/x_tables.h
> index 8d674a7..f07eab2 100644
> --- a/include/linux/netfilter/x_tables.h
> +++ b/include/linux/netfilter/x_tables.h
> @@ -216,6 +216,9 @@ struct xt_action_param {
> const void *matchinfo, *targinfo;
> };
> const struct net_device *in, *out;
> +#ifdef CONFIG_NETFILTER_XTABLES_CACHE
> + u_int32_t cache;
> +#endif
Perhaps we should add it, that the end of the struct, to avoid too big ABI
breakage. And I generally don't like, adding compile time optional
elements in the middle of a struct, as it make its harder to cache profile
and padding/aligning the struct.
> int fragoff;
> unsigned int thoff;
> unsigned int hooknum;
> @@ -223,6 +226,15 @@ struct xt_action_param {
> bool hotdrop;
> };
>
> +enum xt_cache_owner {
> + XT_CACHE_OWNER_NONE = 0,
> + XT_CACHE_OWNER_IPSET = 1,
> +};
> +
> +#define XT_CACHE_GET_OWNER(cache) (((cache) & 0xFF000000) >> 24)
> +#define XT_CACHE_SET_OWNER(cache, owner) ((cache) |= (owner) << 24)
> +#define XT_CACHE_GET_VALUE(cache) ((cache) & 0x00FFFFFF)
> +
So, you are reserving 24 bit for data/"values". And we have 8 bits for
setting an owner of this data. Thats the basic idea right?
Cheers,
Jesper Brouer
--
-------------------------------------------------------------------
MSc. Master of Computer Science
Dept. of Computer Science, University of Copenhagen
Author of http://www.adsl-optimizer.dk
-------------------------------------------------------------------
next prev parent reply other threads:[~2012-09-19 15:37 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-09-18 21:01 [RFC] Inter-match communication cache Jozsef Kadlecsik
2012-09-19 15:38 ` Jesper Dangaard Brouer [this message]
2012-09-19 16:11 ` Jan Engelhardt
2012-09-19 17:25 ` Jozsef Kadlecsik
2012-09-24 9:57 ` Pablo Neira Ayuso
2012-09-24 10:25 ` Jozsef Kadlecsik
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.64.1209191720490.12601@ask.diku.dk \
--to=hawk@diku.dk \
--cc=kadlec@blackhole.kfki.hu \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).