On 11.04, Pablo Neira Ayuso wrote: > On Thu, Apr 09, 2015 at 01:39:18PM +0000, David Laight wrote: > > From: Pablo Neira Ayuso > > > Sent: 09 April 2015 12:35 > > ... > > > Add support for element timeouts to nft_hash. The lookup and walking > > > functions are changed to ignore timed out elements, a periodic garbage > > > collection task cleans out expired entries. > > > > You probably want to delete timed out entries during insert. > > If you do that you don't really need a garbage collector. > > Exploring a synchronous solution from the Netlink API sounds like an > interesting idea to me. Its an optimization, but it can not replace GC. There's no guarantee further inserts will happen. For dynamic updates, where this is mostly needed, it won't work at all since those happen in the wrong context. Doesn't really seem worth it. > > I'd also worry about re-adding a timed out entry. > > It seems we re-add it as a new entry. Sure, everything except the key might be different. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
