This patch series removes all synchronize_net() calls from netfilter core to speed up net namespace create/delete rate. Freeing of hooks is moved to call_rcu at the cost of additional 24 bytes at the end of each rule blob. include/linux/netfilter.h | 19 +++++-- include/net/netfilter/nf_queue.h | 2 net/netfilter/core.c | 99 ++++++++++++--------------------------- net/netfilter/nf_internals.h | 2 net/netfilter/nf_queue.c | 7 -- net/netfilter/nfnetlink_queue.c | 9 --- 6 files changed, 53 insertions(+), 85 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html