Re: ipset preformance

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 27 Feb 2011, Anatoly Muliarski wrote:

> I did oprofile test on our router and I found strange things with
> ipset performance.
> Using a single check of a nethash set with 3 nets in it consumes 1.88%
> of CPU, using a single check of an ipportiphash with zero items
> consumes 3.39% and ip_set module itself  consumes 4.9%.
> Currently I am using 2.6.25.17 kernel with ipset v2.4.9.

That is a really-really old version of ipset.

> Is it worth to upgrade to ipset v4.5 to resolve this issue?

I believe so. But please note, I stopped the development of the 4.x branch 
and the currently maintained release is 6.x.

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux