Re: [PATCH 0/3] netfilter : 3 patches to boost ip_tables performance

From: Andi Kleen (ak_at_suse.de)
Date: 10/06/05

  • Next message: Chris Wright: "Re: [Keyrings] [PATCH] Keys: Add LSM hooks for key management" 
    Date:	Thu, 6 Oct 2005 19:59:56 +0200
To: Harald Welte <laforge@netfilter.org>, Andi Kleen <ak@suse.de>, Patrick McHardy <kaber@trash.net>, netdev@vger.kernel.org, netfilter-devel@lists.netfilter.org, linux-kernel@vger.kernel.org, Henrik Nordstrom <hno@marasystems.com>

    On Fri, Oct 07, 2005 at 04:38:02AM +0200, Harald Welte wrote:
    > On Wed, Oct 05, 2005 at 06:53:31PM +0200, Andi Kleen wrote:
    > > On Tuesday 04 October 2005 19:01, Patrick McHardy wrote:
    > > > Andi Kleen wrote:
    > > > > In a sense it's even getting worse: For example us losing the CONFIG
    > > > > option to disable local conntrack (Patrick has disabled it some time ago
    > > > > without even a comment why he did it) has a really bad impact in some
    > > > > cases.
    > > >
    > > > It was necessary to correctly handle locally generated ICMP errors.
    > >
    > > Well you most likely wrecked local performance then when it's enabled.
    >
    > so you would favour a system that incorrectly deals with ICMP errors but
    > has higher performance?

    I would favour a system where development doesn't lose sight of performance.
    Perhaps there would be other ways to fix this problem without impacting
    performance unduly? Can you describe it in detail?

    -Andi
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

  • Next message: Chris Wright: "Re: [Keyrings] [PATCH] Keys: Add LSM hooks for key management"

    Relevant Pages

    • Re: [PATCH 0/3] netfilter : 3 patches to boost ip_tables performance
      ... >> It was necessary to correctly handle locally generated ICMP errors. ... > Well you most likely wrecked local performance then when it's enabled. ... architectural error that shows how much experimentation was going ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: [PATCH 0/3] netfilter : 3 patches to boost ip_tables performance
      ... On Tuesday 04 October 2005 19:01, Patrick McHardy wrote: ... Well you most likely wrecked local performance then when it's enabled. ... send the line "unsubscribe linux-kernel" in ... More majordomo info at http://vger.kernel.org/majordomo-info.html ...
      (Linux-Kernel)