Eric Dumazet 711bdde6a8 netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference. ...

After Florian patches, there is no need for XT_TABLE_INFO_SZ anymore :
Only one copy of table is kept, instead of one copy per cpu.

We also can avoid a dereference if we put table data right after
xt_table_info. It reduces register pressure and helps compiler.

Then, we attempt a kmalloc() if total size is under order-3 allocation,
to reduce TLB pressure, as in many cases, rules fit in 32 KB.

Signed-off-by: Eric Dumazet <[email protected]>
Cc: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>

2015-06-15 20:19:20 +02:00

..

ip6_tables.c

netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.

2015-06-15 20:19:20 +02:00

ip6t_ah.c

…

ip6t_eui64.c

…

ip6t_frag.c

…

ip6t_hbh.c

…

ip6t_ipv6header.c

…

ip6t_MASQUERADE.c

…

ip6t_mh.c

…

ip6t_NPT.c

…

ip6t_REJECT.c

netfilter: ip6t_REJECT: check for IP6T_F_PROTO

2015-03-22 20:02:46 +01:00

ip6t_rpfilter.c

…

ip6t_rt.c

…

ip6t_SYNPROXY.c

netfilter: Make nf_hookfn use nf_hook_state.

2015-04-04 12:31:38 -04:00

ip6table_filter.c

netfilter: Pass nf_hook_state through ip6t_do_table().

2015-04-04 12:52:06 -04:00

ip6table_mangle.c

netfilter: Pass nf_hook_state through ip6t_do_table().

2015-04-04 12:52:06 -04:00

ip6table_nat.c

netfilter: Pass nf_hook_state through ip6t_do_table().

2015-04-04 12:52:06 -04:00

ip6table_raw.c

netfilter: Pass nf_hook_state through ip6t_do_table().

2015-04-04 12:52:06 -04:00

ip6table_security.c

netfilter: Pass nf_hook_state through ip6t_do_table().

2015-04-04 12:52:06 -04:00

Kconfig

netfilter: Kconfig: get rid of parens around depends on

2015-06-15 17:26:37 +02:00

Makefile

…

nf_conntrack_l3proto_ipv6.c

netfilter: Make nf_hookfn use nf_hook_state.

2015-04-04 12:31:38 -04:00

nf_conntrack_proto_icmpv6.c

…

nf_conntrack_reasm.c

…

nf_defrag_ipv6_hooks.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

nf_log_ipv6.c

netfilter: Use LOGLEVEL_<FOO> defines

2015-03-25 12:09:39 +01:00

nf_nat_l3proto_ipv6.c

netfilter: Pass nf_hook_state through nf_nat_ipv6_{in,out,fn,local_fn}().

2015-04-04 12:48:08 -04:00

nf_nat_masquerade_ipv6.c

…

nf_nat_proto_icmpv6.c

…

nf_reject_ipv6.c

netfilter: bridge: add helpers for fetching physin/outdev

2015-04-08 16:49:08 +02:00

nf_tables_ipv6.c

netfilter: Pass nf_hook_state through nft_set_pktinfo*().

2015-04-04 12:54:27 -04:00

nft_chain_nat_ipv6.c

netfilter: Pass nf_hook_state through nft_set_pktinfo*().

2015-04-04 12:54:27 -04:00

nft_chain_route_ipv6.c

netfilter: Pass nf_hook_state through nft_set_pktinfo*().

2015-04-04 12:54:27 -04:00

nft_masq_ipv6.c

netfilter: nf_tables: get rid of NFT_REG_VERDICT usage

2015-04-13 17:17:07 +02:00

nft_redir_ipv6.c

netfilter: nf_tables: switch registers to 32 bit addressing

2015-04-13 17:17:29 +02:00

nft_reject_ipv6.c

netfilter: nf_tables: get rid of NFT_REG_VERDICT usage

2015-04-13 17:17:07 +02:00