Re: [PATCH nf] netfilter: nf_tables: inconditionally bump set->nelems before insertion

Florian Westphal
2026-02-24T19:20:02Z

Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> > Makes sense to you?
>
> My concern is that this slows down a scenario that is possible, ie.
> adding an element to a full set.
>
> ... compared to 71e99ee20fc3, where it is almost *impossible* to reach
> that synchronize_rcu() in a real use-case since you have to register
> 1024 basechains.

Thats a good point, actually. Let me think about it. I'll do a nf-next
PR now and will get back to this today.