Re: [CFT] ipfw SMP-ready dynamic states

2012-11-13 Thread Alexander V. Chernikov
On 14.11.2012 00:16, Alfred Perlstein wrote: Alexander, this is awesome. On 11/13/12 11:28 AM, Alexander V. Chernikov wrote: Hello list! Currently most ipfw operations with dynamic states (keep-state, check-state, limit) are serialized via IPFW_DYN_LOCK() which is per-vnet mutex lock. As a re

Re: [CFT] ipfw SMP-ready dynamic states

2012-11-13 Thread Alfred Perlstein
Alexander, this is awesome. On 11/13/12 11:28 AM, Alexander V. Chernikov wrote: Hello list! Currently most ipfw operations with dynamic states (keep-state, check-state, limit) are serialized via IPFW_DYN_LOCK() which is per-vnet mutex lock. As a result, performance is limited to the same ~6

[CFT] ipfw SMP-ready dynamic states

2012-11-13 Thread Alexander V. Chernikov
Hello list! Currently most ipfw operations with dynamic states (keep-state, check-state, limit) are serialized via IPFW_DYN_LOCK() which is per-vnet mutex lock. As a result, performance is limited to the same ~650kpps as in routing (in several cases). Patch changes the following: * global lo