netdev
[Top] [All Lists]

Re: [PATCH] Reduce netfilter memory use on MP systems

To: Andi Kleen <ak@xxxxxxx>
Subject: Re: [PATCH] Reduce netfilter memory use on MP systems
From: Harald Welte <laforge@xxxxxxxxxxxxx>
Date: Mon, 7 Feb 2005 19:31:25 +0100
Cc: netdev@xxxxxxxxxxx, netfilter-devel@xxxxxxxxxxxxxxxxxxx
In-reply-to: <20050204140900.GD2518@xxxxxxxxxxxxx>
Mail-followup-to: Harald Welte <laforge@xxxxxxxxxxxxx>, Andi Kleen <ak@xxxxxxx>, netdev@xxxxxxxxxxx, netfilter-devel@xxxxxxxxxxxxxxxxxxx
References: <20050204140900.GD2518@xxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
User-agent: Mutt/1.5.6+20040907i
On Fri, Feb 04, 2005 at 03:09:00PM +0100, Andi Kleen wrote:
> 
> On kernels compiled with a big NR_CPUS netfilter rules would 
> eat a lot of memory because all counters would be duplicated
> for all NR_CPUs CPUs.  With NR_CPUS=256 this would add up
> to many MBs of memory.

Thanks, Andi.  I think the NR_CPUS is actually a remnescant of 2.3.x
times when we didn't have num_possible_cpus() yet.

Also wrt. your vmalloc issues, I think there are floating around some
patches which replace our vmalloc use by __get_free_pages() anyway.

-- 
- Harald Welte <laforge@xxxxxxxxxxxxx>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

Attachment: signature.asc
Description: Digital signature

<Prev in Thread] Current Thread [Next in Thread>