Re: iptables very slow after commit784544739a25c30637397ace5489eeb6e15d7d49



From: Stephen Hemminger <shemminger@xxxxxxxxxx>
Date: Fri, 10 Apr 2009 09:52:46 -0700

[ CC:'ing netfilter-devel and netdev... ]

On Fri, 10 Apr 2009 17:15:52 +0800 (SGT)
Jeff Chua <jeff.chua.linux@xxxxxxxxx> wrote:



Adding 200 records in iptables took 6.0sec in 2.6.30-rc1 compared to
0.2sec in 2.6.29. I've bisected down this commit.

There are a few patches on top of the original patch. When I reverted the
original commit + changing rcu_read() to rcu_read_bh(), it speeds up the
inserts back to .2sec again.

I'm loading all the firewall rules during boot-up and this 6 secs slowness
is really not very nice to wait for.

The performance benefit during operation is more important. The load
time is fixable. The problem is probably generic to any set of rules,
but could you post some info about your configuration (like the rule
set), and the system configuration (# of cpu's, config etc).
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



Relevant Pages

  • Re: iptables very slow after commit 784544739a25c30637397ace5489eeb6e15d7d49
    ... that the networking people are beign silly, and should not synchronize ... but could you post some info about your configuration (like the rule ... More majordomo info at http://vger.kernel.org/majordomo-info.html ... Please read the FAQ at http://www.tux.org/lkml/ ...
    (Linux-Kernel)
  • Re: New IWL4935 driver for Intel Wireless Cards does not support WPA2 wireless network with PEAP 
    ... At the same page a wpasupplicant configuration file is also available, ... connect, whether through NM-applet or from the command line, using ... More majordomo info at http://vger.kernel.org/majordomo-info.html ... Please read the FAQ at http://www.tux.org/lkml/ ...
    (Linux-Kernel)
  • Fwd: 2.6.26.x hangs on amd64/smp
    ... I have done some tests with the _same_ configuration, ... Identifier "ATI Technologies Inc ATI Default Card" ... More majordomo info at http://vger.kernel.org/majordomo-info.html ... Please read the FAQ at http://www.tux.org/lkml/ ...
    (Linux-Kernel)
  • Re: iptables very slow after commit784544739a25c30637397ace5489eeb6e15d7d49
    ... There are a few patches on top of the original patch. ... but could you post some info about your configuration (like the rule ... More majordomo info at http://vger.kernel.org/majordomo-info.html ...
    (Linux-Kernel)
  • Re: [PATCH] add __GFP_ZERP to GFP_LEVEL_MASK
    ... original patch: 3977971c7f09ce08ed1b8d7a67b2098eb732e4cd in the -bk ... This probably never showed up as a problem because slab is not using ... More majordomo info at http://vger.kernel.org/majordomo-info.html ... Please read the FAQ at http://www.tux.org/lkml/ ...
    (Linux-Kernel)