I have a legacy application which forwards lots of packets (router, essentially) and uses a lot of sometimes badly written autogenerated iptables rules (about 3,000 of them). I am seeing on a good day high route cache efficiency. Do packets which do not follow the slow path (i.e. cache hits) also cache what iptables rules they hit? Nothing fancy in use bar conn_track. If not, is there some magic wand I can use (other than a rewrite, which has already been done but can't be used in some circumstances) to speed up rule processing? -- Alex Bligh -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
