diff options
| author | Subash Abhinov Kasiviswanathan <subashab@codeaurora.org> | 2016-06-23 18:44:06 -0600 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-07-03 11:15:59 +0200 |
| commit | e8f857a5a1514c3e7d0d8ea0f7d2d571f0e37bd1 (patch) | |
| tree | 6c7c36a3601fb0660797bf5edb1f68a29dae9934 /iptables/iptables.8.in | |
| parent | 2d2b5e046aa56a518160716a9ddf9df53fc79c1f (diff) | |
xtables: Add an interval option for xtables lock wait
ip[6]tables currently waits for 1 second for the xtables lock to be
freed if the -w option is used. We have seen that the lock is held
much less than that resulting in unnecessary delay when trying to
acquire the lock. This problem is even severe in case of latency
sensitive applications.
Introduce a new option 'W' to specify the wait interval in microseconds.
If this option is not specified, the command sleeps for 1 second by
default.
v1->v2: Change behavior to take millisecond sleep as an argument to
-w as suggested by Pablo. Also maintain current behavior for -w to
sleep for 1 second as mentioned by Liping.
v2->v3: Move the millisecond behavior to a new option as suggested
by Pablo.
v3->v4: Use select instead of usleep. Sleep every iteration for
the time specified in the "-W" argument. Update man page.
v4->v5: Fix compilation error when enabling nftables
v5->v6: Simplify -W so it only takes the interval wait in microseconds.
Bail out if -W is specific but -w is not.
Joint work with Pablo Neira.
Signed-off-by: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables/iptables.8.in')
| -rw-r--r-- | iptables/iptables.8.in | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/iptables/iptables.8.in b/iptables/iptables.8.in index 5a8c7ae1..a9c6b252 100644 --- a/iptables/iptables.8.in +++ b/iptables/iptables.8.in @@ -370,6 +370,13 @@ the program will exit if the lock cannot be obtained. This option will make the program wait (indefinitely or for optional \fIseconds\fP) until the exclusive lock can be obtained. .TP +\fB\-W\fP, \fB\-\-wait-interval\fP \fImicroseconds\fP +Interval to wait per each iteration. +When running latency sensitive applications, waiting for the xtables lock +for extended durations may not be acceptable. This option will make each +iteration take the amount of time specified. The default interval is +1 second. This option only works with \fB\-w\fP. +.TP \fB\-n\fP, \fB\-\-numeric\fP Numeric output. IP addresses and port numbers will be printed in numeric format. |