On Sunday 2009-04-05 12:01, Eric Dumazet wrote: > >This could probably be solved using a single "table" containing >rules only, that could be shared for every cpus. Only counters >should be percpu. This should save a lot of ram, over previous >situation (2.6.29 or current one) Why would counters stay separate? I recognize all of this table copying is related to do NUMA optimizations, and I think I heard cache bouncing too somewhere else. [ http://marc.info/?l=netfilter-devel&m=119903624211253&w=2 ] -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html