Florian Westphal 482cfc3185 netfilter: xtables: avoid percpu ruleset duplication ... We store the rule blob per (possible) cpu. Unfortunately this means we can waste lot of memory on big smp machines. ipt_entry structure ('rule head') is 112 byte, so e.g. with maxcpu=64 one single rule eats close to 8k RAM. Since previous patch made counters percpu it appears there is nothing left in the rule blob that needs to be percpu. On my test system (144 possible cpus, 400k dummy rules) this change saves close to 9 Gigabyte of RAM. Reported-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> Acked-by: Jesper Dangaard Brouer <brouer@redhat.com> Signed-off-by: Florian Westphal <fw@strlen.de> Acked-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2015-06-12 14:27:10 +02:00
..
6lowpan	6lowpan: nhc: add other known rfc6282 compressions	2015-02-14 23:08:44 +01:00
9p	9p: patches for 4.1 merge window	2015-04-18 17:45:30 -04:00
802	net: Kill dev_rebuild_header	2015-03-02 16:43:41 -05:00
8021q	vlan: Add GRO support for non hardware accelerated vlan	2015-06-01 16:50:52 -07:00
appletalk	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
atm	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
ax25	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
batman-adv	batman-adv: change the MAC of each VLAN upon ndo_set_mac_address	2015-06-07 17:07:20 +02:00
bluetooth	Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next	2015-05-30 23:26:45 -07:00
bridge	netfilter: bridge: restore vlan tag when refragmenting	2015-06-12 14:16:55 +02:00
caif	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
can	can: cangw: introduce optional uid to reference created routing jobs	2015-06-09 09:39:49 +02:00
ceph	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
core	net/ethtool: Add current supported tunable options	2015-06-11 00:36:37 -07:00
dcb	net/dcb: Add IEEE QCN attribute	2015-03-06 21:50:02 -05:00
dccp	inet: fix possible panic in reqsk_queue_unlink()	2015-04-24 11:39:15 -04:00
decnet	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
dns_resolver
dsa	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
ethernet	net: Add full IPv6 addresses to flow_keys	2015-06-04 15:44:30 -07:00
hsr	net/hsr: Fix NULL pointer dereference and refcnt bugs when deleting a HSR interface.	2015-03-01 13:40:23 -05:00
ieee802154	nl802154: add support to set cca ed level	2015-05-27 19:29:42 +02:00
ipv4	netfilter: xtables: avoid percpu ruleset duplication	2015-06-12 14:27:10 +02:00
ipv6	netfilter: xtables: avoid percpu ruleset duplication	2015-06-12 14:27:10 +02:00
ipx	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
irda	irda: use msecs_to_jiffies for conversion to jiffies	2015-05-25 17:46:21 -04:00
iucv	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
key	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
l2tp	net: Modify sk_alloc to not reference count the netns of kernel sockets.	2015-05-11 10:50:18 -04:00
lapb
llc	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
mac80211	mac80211: convert HW flags to unsigned long bitmap	2015-06-10 16:05:36 +02:00
mac802154	nl802154: add support to set cca ed level	2015-05-27 19:29:42 +02:00
mpls	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-08 20:06:56 -07:00
netfilter	netfilter: xtables: avoid percpu ruleset duplication	2015-06-12 14:27:10 +02:00
netlabel	netlink: implement nla_put_in_addr and nla_put_in6_addr	2015-03-31 13:58:35 -04:00
netlink	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-05-23 01:22:35 -04:00
netrom	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
nfc	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
openvswitch	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-08 20:06:56 -07:00
packet	net-packet: fix null pointer exception in rollover mode	2015-05-17 22:41:38 -04:00
phonet	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
rds	net/rds Add getsockopt support for SO_RDS_TRANSPORT	2015-05-31 21:47:23 -07:00
rfkill	net: rfkill: gpio: make better use of gpiod API	2015-05-29 13:13:45 +02:00
rose	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
rxrpc	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
sched	bpf: make programs see skb->data == L2 for ingress and egress	2015-06-07 02:01:33 -07:00
sctp	ipv6: Add rt6_get_cookie() function	2015-05-25 13:25:34 -04:00
sunrpc	svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures	2015-05-04 12:02:40 -04:00
switchdev	switchdev: fix BUG when port driver doesn't support set attr op	2015-06-11 16:27:09 -07:00
tipc	tipc: unconditionally put sock refcnt when sock timer to be deleted is pending	2015-05-30 18:08:37 -07:00
unix	net/unix: support SCM_SECURITY for stream sockets	2015-06-10 22:49:20 -07:00
vmw_vsock	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
wimax
wireless	cfg80211: ignore netif running state when changing iftype	2015-05-29 13:05:40 +02:00
x25	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
xfrm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
compat.c	net: switch importing msghdr from userland to {compat_,}import_iovec()	2015-04-09 00:02:26 -04:00
Kconfig	net: add CONFIG_NET_INGRESS to enable ingress filtering	2015-05-14 01:10:05 -04:00
Makefile	mpls: Refactor how the mpls module is built	2015-03-04 00:26:06 -05:00
socket.c	net: Add a struct net parameter to sock_create_kern	2015-05-11 10:50:17 -04:00
sysctl_net.c