Re: [PATCH nf-next] netfilter: conntrack: collect start time as early as possible

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Florian,

On Sat, Oct 26, 2024 at 12:50:13PM +0200, Florian Westphal wrote:
> Sample start time at allocation time, not when the conntrack entry
> is inserted into the hashtable.

Back at the time, long time ago, I remember to have measured a
performance impact on this.

> In most cases this makes very little difference, but there are
> cases where there is significant delay beteen allocation and
> confirmation, e.g. when packets get queued to userspace.

I delayed this to insertion time because packet could dropped before,
rendering this conntrack timestamp useless? There is no event
reporting for conntrack that never get confirmed.




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux