On Tue, May 17, 2022 at 07:59:06PM +0300, Vlad Buslov wrote: > Current conntrack offload implementation doesn't provide much visibility > and control over offload code. The code just tries to offload new flows, > even if current amount of flows is beyond what can be reasonably > processed by target hardware. On top of that there is no way to > determine current load on workqueues that process the offload tasks > which makes it hard to debug the cases where offload is significantly > delayed due to rate of new connections being higher than driver or > hardware offload rate. > > Improve the debuggability situation by implementing following new > functionality: > > - Sysctls for current total count of offloaded flow and > user-configurable maximum. Capping the amount of offloaded flows can > be useful for the allocations of hardware resources. Note that the > flow can still be offloaded afterwards via 'refresh' mechanism if > total hardware count. > > - Procfs for current total of workqueue tasks for nf_ft_offload_add, > nf_ft_offload_del and nf_ft_offload_stats queues. This allows > visibility for flow offload delay due to system scheduling offload > tasks faster than driver/hardware can process them. Series applied, thanks!