Ubuntu
linux package

  1. Bug #1640786
  2. Comment #6

Comment 6 for bug 1640786

Revision history for this message
Eric Desrochers (slashd) wrote : Re: netfilter regression introducing a performance slowdown in binary ip/ip6tables

There is 3 upstream patches[1] "Under Review", that has been created to mitigate this specific situation. The test (with these patches) so far has been proven to provide better performance.

The patches consist on allocating the percpu counters in page-sized batch chunks.

[1] - Patches :
http://patchwork.ozlabs.org/patch/697259/
http://patchwork.ozlabs.org/patch/697260/
http://patchwork.ozlabs.org/patch/697261/

- Eric