Hi Phil, On Tue, Oct 24, 2017 at 07:40:21PM +0200, Phil Sutter wrote: [...] > I wonder whether we need to reset the cache at all: Good point. > We could make cache_update() ignore cache->initialized and instead > check whether nft_genid did change after calling netlink_genid_get() > - if not, cache is up to date, otherwise call cache_init(). When we > discussed possible performance implications of cache updates, I > suggested just that as a first counter-measure. > > Could this work? Or am I missing something? For the simple API, I think it makes sense to remove this nft_ctx_flush_cache() and just perform inconditional cache refresh on every nft_cmd_*() call by now. We can revisit later on to do incremental cache updates based on generation ID as you said. If we keep track of incremental updates, then we will need event handling. But for now I will go simple. Thanks! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html