Re: Ref: zerocopy +netfilter performance problem.

[Ravi Chamarti <ravi_chamarti@yahoo.com>]

Hi,

Thanks for your response Alexey. I appreciate it. 

--- kuznet@ms2.inr.ac.ru wrote:
> Hello!
> 
> > My question is that is this copy is required for
> > netfilter to work? Do we somehow get around
> > with netfilter to work such that the zerocopy path
> > passes the packet without any copy?
> 
> Yes & yes.
> 
> Existing netfilter modules do not understand
> fragmented skbs,
> and as soon as netfilter folks are lazy even to move
> the check
> to relevant modules, even smart hooks has to be
> harmed by this.

How many netfilter modules exist which do not
understand fragmented skbs and need to look at the
skb data? 

Will the following approach work? 

if the somehow hook register shows interest only in
header (by setting a flag, may be in nf_hooks_ops 
struct), then we can avoid the copy of the fragmented
skb's data and all other cases, we copy fragmented
skb's data to a kernel buffer. The side effect is that
a flag field is introduced into nf_hook_ops struct
which makes netfilter modules to recompile. Are there
any other side affects or better approaches?


regards
Ravi Chamarti


__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com