netfilter: nf_tables: use new transaction infrastructure to handle chain

Browse source

This patch speeds up rule-set updates and it also introduces a way to
revert chain updates if the batch is aborted. The idea is to store the
changes in the transaction to apply that in the commit step.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2014-04-09 11:58:08 +02:00

parent ff3cd7b3c9

commit 91c7b38dc9

2 changed files with 175 additions and 45 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

17

include/net/netfilter/nf_tables.h

View file

203

net/netfilter/nf_tables_api.c

View file