diff options
author | Florian Westphal <fw@strlen.de> | 2019-01-09 00:15:09 +0100 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2019-01-11 15:06:00 +0100 |
commit | ce2651222911f09ca838fbdd29b5b2e0ff5f262f (patch) | |
tree | 6298b45b289b47edf36a1b71addcedaea7dce7c9 /files/examples | |
parent | b338244abc7f018d79a95657fff88eadee7e9f6b (diff) |
payload: refine payload expr merging
nf_tables can handle payload exprs for sizes <= sizeof(u32) via a direct
operation from the eval loop, rather than a a call to the payload
expression. Two loads for four byte quantities are thus faster than a
single load for an 8 byte load.
ip saddr 1.2.3.4 ip daddr 2.3.4.5
is faster with this applied, even though it involves two payload and two
two compare expressions, just because all can be handled from the main
loop without any calls to expression ops.
Keep merging for linklayer and when at least one of the expressions
already exceeded the 4 byte "limit" anyway.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'files/examples')
0 files changed, 0 insertions, 0 deletions