On 06/14/2018 11:03 PM, Steffen Klassert wrote: > On Thu, Jun 14, 2018 at 08:57:20AM -0700, Eric Dumazet wrote: >> >> Saving cpu cycles on moderate load is not okay if added complexity >> slows down the DDOS (or stress) by 10 % :/ > > Why 10%? > GRO adds a ~6 % cost on UDP receive path at this moment, depending on the state of GRO engine (number of packets in the napi->gro_list) Adding yet another conditions and icache pressure might raise the cost to 10%, but we do not know because the numbers presented in this RFC do not include that. (Early demux is also adding extra costs for UDP on 'non connected sockets' BTW) Most linux hosts are not routers, but end hosts, lets not forget this... -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html