From: Eric W. Biederman > Sent: 25 July 2018 18:38 ... > >> Further unless I misread something you are increasing the number of > >> timers to 3 per namespace. If I create create a thousand network > >> namespaces that feels like it will hurt system performance overall. > > > > It seems to me the timers are per neighbor entry not table. The per > > table ones are for proxies. > > It seems I misread that bit when I was refreshing my memory on what > everything is doing. If we can already have 1024 timers that makes > timers not a concern. Surely it is enough to just have a timestamp in each entry. Deletion of expired items need not be done until insert (which has the table suitable locked) bumps into an expired item. David - Registered Address Lakeside, Bramley Road, Mount Farm, Milton Keynes, MK1 1PT, UK Registration No: 1397386 (Wales) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html