netfilter: x_tables: don't use seqlock when fetching old counters

Browse source

after previous commit xt_replace_table will wait until all cpus
had even seqcount (i.e., no cpu is accessing old ruleset).

Add a 'old' counter retrival version that doesn't synchronize counters.
Its not needed, the old counters are not in use anymore at this point.

This speeds up table replacement on busy systems with large tables
(and many cores).

Cc: Dan Williams <dcbw@redhat.com>
Cc: Eric Dumazet <edumazet@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Florian Westphal 2017-10-12 01:13:51 +02:00 • committed by Pablo Neira Ayuso

parent 80055dab5d

commit d13e7b2e65

3 changed files with 61 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

22

net/ipv4/netfilter/arp_tables.c

View file

23

net/ipv4/netfilter/ip_tables.c

View file

22

net/ipv6/netfilter/ip6_tables.c

View file