On Thu, Nov 5, 2009 at 1:23 PM, Patrick McHardy <kaber@xxxxxxxxx> wrote: > The default is not properly sized, its a trade-off between memory > use and performance. A good size would be 2 * max_entries since > each conntrack is hashed twice. > Ok, I seem to understand: since each tuple is hased in the table, actually the real table size is double of the nf_conntrack_max parameter, so to have maximum performance (1 entry per bucket) we should have a table with size = 2*nf_conntrack_max. Am I right? Thank you very much for the explanation. Luca -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html