On Thu, Jan 27, 2022 at 02:09:13PM +0000, Pavel Begunkov wrote: > Even though there is a static key protecting from overhead from > cgroup-bpf skb filtering when there is nothing attached, in many cases > it's not enough as registering a filter for one type will ruin the fast > path for all others. It's observed in production servers I've looked > at but also in laptops, where registration is done during init by > systemd or something else. > > Add a per-socket fast path check guarding from such overhead. This > affects both receive and transmit paths of TCP, UDP and other > protocols. It showed ~1% tx/s improvement in small payload UDP > send benchmarks using a real NIC and in a server environment and the > number jumps to 2-3% for preemtible kernels. Acked-by: Martin KaFai Lau <kafai@xxxxxx>
