Eric Dumazet wrote:
Rick Jones a écrit :
Anyhow, the spread on trans/s/netperf is now 600 to 500 or 6000, which
does represent an improvement.
Yes indeed you have a speedup, tcp conntracking is OK.
You now hit the nf_conntrack_lock spinlock we have in generic conntrack code
(net/netfilter/nf_conntrack_core.c)
nf_ct_refresh_acct() for instance has to lock it.
We really want some finer locking here.
That looks more complicated since it requires to take multiple locks
occasionally (f.i. hash insertion, potentially helper-related and
expectation-related stuff), and there is the unconfirmed_list, where
fine-grained locking can't really be used without changing it to
a hash.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
