On Thu, Jan 27, 2022 at 10:09 AM Martin KaFai Lau <kafai@xxxxxx> wrote: > > On Thu, Jan 27, 2022 at 02:09:13PM +0000, Pavel Begunkov wrote: > > Even though there is a static key protecting from overhead from > > cgroup-bpf skb filtering when there is nothing attached, in many cases > > it's not enough as registering a filter for one type will ruin the fast > > path for all others. It's observed in production servers I've looked > > at but also in laptops, where registration is done during init by > > systemd or something else. > > > > Add a per-socket fast path check guarding from such overhead. This > > affects both receive and transmit paths of TCP, UDP and other > > protocols. It showed ~1% tx/s improvement in small payload UDP > > send benchmarks using a real NIC and in a server environment and the > > number jumps to 2-3% for preemtible kernels. > Acked-by: Martin KaFai Lau <kafai@xxxxxx> Applied. Thanks