]> www.infradead.org Git - users/jedix/linux-maple.git/commit
netfilter: nf_conntrack: speed up reads from nf_conntrack proc file
authorFlorian Westphal <fw@strlen.de>
Tue, 22 Apr 2025 13:17:29 +0000 (15:17 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 5 May 2025 11:16:26 +0000 (13:16 +0200)
commit5e4d107abd796fa433084ae656076952fb7f7d6d
tree04a853924119fa255a834d791ecf6fa0d1199ccc
parentbfe7cfb65c753952735c3eed703eba9a8b96a18d
netfilter: nf_conntrack: speed up reads from nf_conntrack proc file

Dumping all conntrack entries via proc interface can take hours due to
linear search to skip entries dumped so far in each cycle.

Apply same strategy used to speed up ipvs proc reading done in
commit 178883fd039d ("ipvs: speed up reads from ip_vs_conn proc file")
to nf_conntrack.

Note that the ctnetlink interface doesn't suffer from this problem, but
many scripts depend on the nf_conntrack proc interface.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_standalone.c