When reviewing the iptables code, I find there is one exact copy of table on every possible CPU for parallel processing. However, only counters are private, and the others are the same. It is a wast of memory. I know the current implementation maybe good for NUMA, but I don't think NUMA is common, and I doubt its benefit. I'll try to convert the code use one shared table, but private counters. Any comment? -- Regards, Changli Gao(xiaosuo@xxxxxxxxx) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html