On 08.11.2010 07:51, Eric Dumazet wrote: > Le lundi 08 novembre 2010 à 14:44 +0800, Changli Gao a écrit : >> On Mon, Nov 8, 2010 at 2:39 PM, Patrick McHardy <kaber@xxxxxxxxx> wrote: >>> [resend with netfilter-devel address fixed] >>> >>> On 08.11.2010 07:36, Patrick McHardy wrote: >>>> On 08.11.2010 07:32, Changli Gao wrote: >>>>> When conntrack is enabled, we can cache dst_entry into the >>>>> corresponding conntrack to eliminate the subsequence >>>>> ip_route_input_noref() calls for the same connection. The current >>>>> implementation is a standalone module. If this idea is welcomed, I'll >>>>> try to push it up. Thanks. >>>>> >>>>> Here it is: https://github.com/xiaosuo/xiaosuo/tree/master/nf_rtcache/ >>>> >>>> Please send the patch as attachment so it can be discussed. >>> >>> >> >> Here is a trivial patch to add RTCACHE NF extention. >> >> >> ... > Adding yet another level of cache seems wrong to me. > > Either we fix the first level, or we dont use it at all. > > If ip_route_input_noref() is slow, we can work on it to make it faster. > > I know dst_use_noref() is the real problem an can be optimized if > needed. I think the main idea is to make double use of the existing conntrack lookup. The most interesting part about this idea in my opinion is that it should make multipath setups very easy since you don't have to manually deal with expiring routing cache entries anymore. However this clearly is a big change to the existing behaviour of the routing cache and needs a lot more thought, which I will perform after having some coffee :) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html