On Wed, Oct 12, 2022 at 05:17:50PM +0200, Phil Sutter wrote: [...] > I had this in mind for a while now and finally got around to do it: When > testing an extensions/*.t file with iptables-tests.py, act in a "batch" > mode applying all rules at once and checking the expected output in one > go, thereby reducing the overhead per test file to a single > iptables-restore and iptables-save call each. This was a bit optimistic, > but the result is still significant - on my rather slow testing VM, a > full iptables-tests.py run completes in ~7min instead of ~30min (yes, > it's slow). FTR: I tested this once more on a not entirely broken machine which managed to complete a full testrun in 3min (i.e. a tenth of my VM). With this patch applied, the same run took merely 40s - so still significant. Series applied meanwhile. Cheers, Phil