Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751253AbVJFRa4 (ORCPT ); Thu, 6 Oct 2005 13:30:56 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751252AbVJFRa4 (ORCPT ); Thu, 6 Oct 2005 13:30:56 -0400 Received: from [213.95.27.120] ([213.95.27.120]:8406 "EHLO ganesha.gnumonks.org") by vger.kernel.org with ESMTP id S1751249AbVJFRaz (ORCPT ); Thu, 6 Oct 2005 13:30:55 -0400 Date: Fri, 7 Oct 2005 04:38:02 +0200 From: Harald Welte To: Andi Kleen Cc: Patrick McHardy , netdev@vger.kernel.org, netfilter-devel@lists.netfilter.org, linux-kernel@vger.kernel.org, Henrik Nordstrom Subject: Re: [PATCH 0/3] netfilter : 3 patches to boost ip_tables performance Message-ID: <20051007023801.GA5953@rama> Mail-Followup-To: Harald Welte , Andi Kleen , Patrick McHardy , netdev@vger.kernel.org, netfilter-devel@lists.netfilter.org, linux-kernel@vger.kernel.org, Henrik Nordstrom References: <432EF0C5.5090908@cosmosbay.com> <200509281037.03185.ak@suse.de> <4342B575.9090709@trash.net> <200510051853.32196.ak@suse.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="/04w6evG8XlLl3ft" Content-Disposition: inline In-Reply-To: <200510051853.32196.ak@suse.de> User-Agent: mutt-ng devel-20050619 (Debian) Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1844 Lines: 50 --/04w6evG8XlLl3ft Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Oct 05, 2005 at 06:53:31PM +0200, Andi Kleen wrote: > On Tuesday 04 October 2005 19:01, Patrick McHardy wrote: > > Andi Kleen wrote: > > > In a sense it's even getting worse: For example us losing the CONFIG > > > option to disable local conntrack (Patrick has disabled it some time = ago > > > without even a comment why he did it) has a really bad impact in some > > > cases. > > > > It was necessary to correctly handle locally generated ICMP errors. >=20 > Well you most likely wrecked local performance then when it's enabled. so you would favour a system that incorrectly deals with ICMP errors but has higher performance? --=20 - Harald Welte http://netfilter.org/ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie --/04w6evG8XlLl3ft Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFDRd+JXaXGVTD0i/8RAv8nAJ0VJn1aig7l8IyTAjs4MT5AnphWxQCfUv5E k87CKliQJ2YXeGO2lH0cv48= =kdbd -----END PGP SIGNATURE----- --/04w6evG8XlLl3ft-- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/