Gleb Smirnoff wrote: > On Mon, Nov 28, 2005 at 06:04:50PM +0100, Max Laier wrote: > M> I remember that we had an extensive discussion about this around > M> FreeBSD-SA-05:13.ipfw - the bottom line seems to be: either parallel or > M> cacheing. Stack storage should work as well. > > The cacheing is a good idea when one table is looked up several times > for one packet. The above proposal eliminates need for such rulesets. > And thus we can work towards parallelizm.
The ipfw tables are protected by the ipfw lock. So this parallel lookup Gelb has in his patch works fine and doesn't have any races. No caching between packets can be done without extra locks. Only caching between rules can be done by saving the result on the stack. The result must not be accessed anymore once the ipfw lock has been given up. -- Andre _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"
