Eric Dumazet <eric.dumazet@xxxxxxxxx> wrote: > From: Eric Dumazet <edumazet@xxxxxxxxxx> > > xt_hashlimit cannot be used with large hash tables, because garbage > collector is run from a timer. If table is really big, its possible > to hold cpu for more than 500 msec, which is unacceptable. > > Switch to a work queue, and use proper scheduling points to remove > latencies spikes. > > Later, we also could switch to a smoother garbage collection done > at lookup time, one bucket at a time... > > Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx> Reviewed-by: Florian Westphal <fw@xxxxxxxxx> Thanks Eric! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html