This series removes the per-namespace duplication of the NAT bysource table. We use one table for all namespaces, using net_hash_mix(net) as additional hash seed so entries are spread evenly even if addresses overlap. We then also remove the per-namespace kmem cache and allocate all conntrack entries from the same cache. This is the last table: earlier patches already converted conntrack and expectation tables. I have another patch queued to convert nat bysource table to an rhashtable. However; it seems better to wait until the next merge window so that bug reports can be more easily pointed to the de-duplication work or a rhashtable conversion, I will therefore hold this back for now. Other items that might be de-namespaced but are not being worked on at the moment: struct ct_pcpu __percpu *pcpu_lists Only problem might be reliable event redelivery; such conntracks sit on the dying list, if this list is global we also need to make sure that we don't spend too much cycles iterating, especially if lots of namespaces use reliable event delivery and are backlogged (userspace not reading events fast enough). struct ip_conntrack_stat __percpu *stat; Easy to convert. However this would mean that information gets leaked as all namespaces would see same stats. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
