low hanging fruits to speed up netns cleanup in netfilter. We're way too happy to issue expensive synchronize_rcu() all over the place. On my test vm 8 processes doing 32 unshare each finish in ~3 minutes, with these patches it gets down to 40 seconds. We could probably further improve this. include/net/netfilter/nf_queue.h | 3 -- net/netfilter/core.c | 55 ++++++++++++++++++++++++++++++++------- net/netfilter/nf_internals.h | 2 - net/netfilter/nf_log.c | 1 net/netfilter/nf_queue.c | 7 +++- net/netfilter/nfnetlink_queue.c | 18 +++++------- 6 files changed, 61 insertions(+), 25 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html