Definitelly what my test shows - while rule-inserts - if you try to insert 10000 rules - after a several hundreds - it will be inserting like a 1 rule in 1 second and slowness will progress :) regarding the further slowness inside the kernel - i'm reffering to the following tests, since did not do mine http://people.netfilter.org/kadlec/nftest.pdf and http://www.hipac.org/performance_tests/independent.html On Thursday 15 May 2008 15:43, Jan Engelhardt wrote: > On Thursday 2008-05-15 12:35, Anton wrote: > >> You missed IPMARK from Xtables-addons which does the > >> marking in O(1) instead of O(n). > > > >Great! This partially solves problem with marking while > > used with shaper, but in global scope - iptables > > remains slow? > > Slow, where? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
