On Fri, Jan 16, 2015 at 09:31:56PM +0000, Patrick McHardy wrote: > > I'm tending towards deferring resize operations while dumps are in > progress. Since we only allow dumps by root, it seems the worst > thing that can happen is that we run using a non optimal hash, > which is comparable to having a badly structured ruleset. BTW, the current rhashtable has a deficiency in that the insert operation never fails. However, with delayed resizing, we must allow insertion to fail or there can be too many insertions that may overwhelm the hash table or even worse overflow the hash table size counter. So in this scenario, a dump may cause insertion failures by delaying the completion of the expansion. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html