Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > I'd suggest to add timestamping support to the trace infrastructure > for this purpose so you can collect more accurate numbers of chain > traversal, this can be hidden under static_key. This might work for nft and iptables-nft, but not for iptables-legacy (not sure its a requirement) or OVS.