On Thu, Aug 25, 2016 at 03:33:28PM +0200, Florian Westphal wrote: > During NFWS 2016 it was mentioned that per-conntrack timers have > two drawbacks: > - the 5-day default established timeout is very large and brings > extra constraints for the timer subsystem. > - most distros enable timer stats so timer struct eats 80 bytes > in each conntrack object. > > This series replaces the per-object struct timer with a u32 jiffie > stamp and one global delayed work queue for conntrack eviction. > Size of nf_conn struct is reduced to 256 bytes on x86_64. > > Eviction is performed from the packet path when doing > table lookup, for cases where we have idle periods the work > queue is used. Series applied, thanks Florian! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
