linux-sg2042/net/ipv6/netfilter
Stephen Hemminger 942e4a2bd6 netfilter: revised locking for x_tables
The x_tables are organized with a table structure and a per-cpu copies
of the counters and rules. On older kernels there was a reader/writer 
lock per table which was a performance bottleneck. In 2.6.30-rc, this
was converted to use RCU and the counters/rules which solved the performance
problems for do_table but made replacing rules much slower because of
the necessary RCU grace period.

This version uses a per-cpu set of spinlocks and counters to allow to
table processing to proceed without the cache thrashing of a global
reader lock and keeps the same performance for table updates.

Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>
Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2009-04-28 22:36:33 -07:00
..
Kconfig netfilter: trivial Kconfig spelling fixes 2009-03-24 13:35:27 -07:00
Makefile netfilter: Combine ipt_ttl and ip6t_hl source 2009-02-18 18:39:31 +01:00
ip6_queue.c netfilter: auto-load ip6_queue module when socket opened 2009-03-16 15:30:14 +01:00
ip6_tables.c netfilter: revised locking for x_tables 2009-04-28 22:36:33 -07:00
ip6t_LOG.c netfilter: use a linked list of loggers 2009-03-16 14:54:21 +01:00
ip6t_REJECT.c netns xfrm: lookup in netns 2008-11-25 17:35:18 -08:00
ip6t_ah.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_eui64.c netfilter: xtables: move extension arguments into compound structure (1/6) 2008-10-08 11:35:18 +02:00
ip6t_frag.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_hbh.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_ipv6header.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_mh.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_rt.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6table_filter.c netfilter: x_tables: remove unneeded initializations 2009-02-18 16:30:20 +01:00
ip6table_mangle.c netfilter: x_tables: remove unneeded initializations 2009-02-18 16:30:20 +01:00
ip6table_raw.c netfilter: x_tables: remove unneeded initializations 2009-02-18 16:30:20 +01:00
ip6table_security.c netfilter: x_tables: remove unneeded initializations 2009-02-18 16:30:20 +01:00
nf_conntrack_l3proto_ipv6.c netfilter: nf_conntrack: calculate per-protocol nlattr size 2009-03-25 21:53:39 +01:00
nf_conntrack_proto_icmpv6.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6 2009-03-26 22:45:23 -07:00
nf_conntrack_reasm.c netfilter: conntrack: check for NEXTHDR_NONE before header sanity checking 2009-03-16 15:52:11 +01:00