From: Florian Westphal <f...@strlen.de> Date: Tue, 18 Dec 2018 17:15:14 +0100
> TL;DR: > - objdiff shows no change if CONFIG_XFRM=n && BR_NETFILTER=n > - small size reduction when one or both options are set > - no changes in ipsec performance > > Changes since v1: > - Allocate entire extension space from a kmem_cache. > - Avoid atomic_dec_and_test operation on skb_ext_put() for refcnt == 1 case. > (similar to kfree_skbmem() fclone_ref use). > > This adds an optional extension infrastructure, with ispec (xfrm) and > bridge netfilter as first users. ... Hey Florian, I just wanted to let you know that I'm actively reviewing this. I have no major issues with the approach, but I just want to understand all of the details before I apply this. And honestly, if this turns out to be the wrong direction we can revert and try doing this another way. Anyways, just FYI...
