-
Eric Dumazet authored
Using "iptables -L" with a lot of rules have a too big BH latency. Jesper mentioned ~6 ms and worried of frame drops. Switch to a per_cpu seqlock scheme, so that taking a snapshot of counters doesnt need to block BH (for this cpu, but also other cpus). This adds two increments on seqlock sequence per ipt_do_table() call, its a reasonable cost for allowing "iptables -L" not block BH processing. Reported-by:
Jesper Dangaard Brouer <hawk@comx.dk> Signed-off-by:
Eric Dumazet <eric.dumazet@gmail.com> CC: Patrick McHardy <kaber@trash.net> Acked-by:
Stephen Hemminger <shemminger@vyatta.com> Acked-by:
Jesper Dangaard Brouer <hawk@comx.dk> Signed-off-by:
Pablo Neira Ayuso <pablo@netfilter.org>
83723d60