Florian Westphal d13e7b2e65 netfilter: x_tables: don't use seqlock when fetching old counters ... after previous commit xt_replace_table will wait until all cpus had even seqcount (i.e., no cpu is accessing old ruleset). Add a 'old' counter retrival version that doesn't synchronize counters. Its not needed, the old counters are not in use anymore at this point. This speeds up table replacement on busy systems with large tables (and many cores). Cc: Dan Williams <dcbw@redhat.com> Cc: Eric Dumazet <edumazet@google.com> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2017-10-24 18:01:50 +02:00
..
ip6_tables.c	netfilter: x_tables: don't use seqlock when fetching old counters	2017-10-24 18:01:50 +02:00
ip6t_ah.c
ip6t_eui64.c
ip6t_frag.c
ip6t_hbh.c
ip6t_ipv6header.c
ip6t_MASQUERADE.c	netfilter: x_tables: move hook state into xt_action_param structure	2016-11-03 10:56:21 +01:00
ip6t_mh.c
ip6t_NPT.c	xtables: extend matches and targets with .usersize	2017-01-09 17:24:55 +01:00
ip6t_REJECT.c	netfilter: x_tables: move hook state into xt_action_param structure	2016-11-03 10:56:21 +01:00
ip6t_rpfilter.c	netfilter: rpfilter: fix incorrect loopback packet judgment	2017-01-16 14:23:01 +01:00
ip6t_rt.c
ip6t_SYNPROXY.c	netfilter: nf_hook_ops structs can be const	2017-07-31 19:10:44 +02:00
ip6table_filter.c	netfilter: xtables: don't hook tables by default	2016-03-02 20:05:24 +01:00
ip6table_mangle.c	netfilter: x_tables: simplify ip{6}table_mangle_hook()	2016-07-01 16:37:02 +02:00
ip6table_nat.c	netfilter: nf_hook_ops structs can be const	2017-07-31 19:10:44 +02:00
ip6table_raw.c	netfilter: xtables: don't hook tables by default	2016-03-02 20:05:24 +01:00
ip6table_security.c	netfilter: xtables: don't hook tables by default	2016-03-02 20:05:24 +01:00
Kconfig	netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c	2016-11-01 20:50:31 +01:00
Makefile	netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c	2016-11-01 20:50:31 +01:00
nf_conntrack_l3proto_ipv6.c	netfilter: conntrack: place print_tuple in procfs part	2017-08-24 18:52:32 +02:00
nf_conntrack_proto_icmpv6.c	netfilter: conntrack: remove pf argument from l4 packet functions	2017-10-24 18:01:49 +02:00
nf_conntrack_reasm.c	Revert "net: fix percpu memory leaks"	2017-09-03 11:01:05 -07:00
nf_defrag_ipv6_hooks.c	netfilter: nf_hook_ops structs can be const	2017-07-31 19:10:44 +02:00
nf_dup_ipv6.c	netfilter: kill the fake untracked conntrack objects	2017-04-15 11:47:57 +02:00
nf_log_ipv6.c	netfilter: constify nf_loginfo structures	2017-08-02 14:25:59 +02:00
nf_nat_l3proto_ipv6.c	net: Replace NF_CT_ASSERT() with WARN_ON().	2017-09-04 13:25:19 +02:00
nf_nat_masquerade_ipv6.c	net: Replace NF_CT_ASSERT() with WARN_ON().	2017-09-04 13:25:19 +02:00
nf_nat_proto_icmpv6.c
nf_reject_ipv6.c	networking: make skb_put & friends return void pointers	2017-06-16 11:48:39 -04:00
nf_socket_ipv6.c	netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c	2016-11-01 20:50:31 +01:00
nf_tables_ipv6.c	netfilter: Add the missed return value check of nft_register_chain_type	2016-09-12 19:54:45 +02:00
nft_chain_nat_ipv6.c
nft_chain_route_ipv6.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-09-25 23:34:19 +02:00
nft_dup_ipv6.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-15 10:54:36 -05:00
nft_fib_ipv6.c	netfilter: nf_tables: fib: use skb_header_pointer	2017-07-31 19:01:39 +02:00
nft_masq_ipv6.c	netfilter: nf_tables: fix mismatch in big-endian system	2017-03-13 13:30:28 +01:00
nft_redir_ipv6.c	netfilter: nf_tables: fix mismatch in big-endian system	2017-03-13 13:30:28 +01:00
nft_reject_ipv6.c	netfilter: nf_tables: use hook state from xt_action_param structure	2016-11-03 11:52:34 +01:00