On 01/27/15 at 09:24pm, Herbert Xu wrote: > The point is that for netfilter as it stands it makes no sense > to go lockless because its modus operandi is to hold a single > lock over everything, including walking/dumping. No objection. I have a patch prepared which allows the user to provide ht->mutex himself so nfset can provide its own existing mutex to rhashtable and lock out the resizes from inserts, removals and dump iterations automatically That would restore the old behaviour of the nfset API without major surgery. I was just waiting on your walker as you requested a hold off. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html