On 17.11.2010 15:54, Changli Gao wrote: > When reviewing the iptables code, I find there is one exact copy of > table on every possible CPU for parallel processing. However, only > counters are private, and the others are the same. It is a wast of > memory. I know the current implementation maybe good for NUMA, but I > don't think NUMA is common, and I doubt its benefit. I'll try to > convert the code use one shared table, but private counters. This was originally done because we used to keep the comefrom pointers in the table and thus needed one private copy per CPU. This is not done anymore since a few versions, so patches to get rid of the table duplication are highly welcome. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html