On Mon, 2016-11-21 at 14:57 +0100, Florian Westphal wrote:
...
> #define SMP_ALIGN(x) (((x) + SMP_CACHE_BYTES-1) & ~(SMP_CACHE_BYTES-1))
> +#define XT_PCPU_BLOCK_SIZE 4096
>
> struct compat_delta {
> unsigned int offset; /* offset in kernel */
> @@ -1618,6 +1619,7 @@
instead of allocating each xt_counter individually, allocate 4k chunks
and then use these for counter allocation requests.
This should speed up rule evaluation by increasing data locality,
also speeds up ruleset loading because we reduce calls to the percpu
allocator.
As Eric points out we can't
