diff options
author | Phil Sutter <phil@nwl.cc> | 2018-11-15 14:53:02 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-11-17 18:09:10 +0100 |
commit | c58ecf9f8bcb7619a27ef8ffaddf847a562475a5 (patch) | |
tree | a1145f835bffbf0a8c9f12ce79a00e60e6b6c7ff /extensions/libipt_icmp.c | |
parent | 7c8791edac3e74f6ce0bf21f98bc820db8e55e62 (diff) |
xtables: Introduce per table chain caches
Being able to omit the previously obligatory table name check when
iterating over the chain cache might help restore performance with large
rulesets in xtables-save and -restore.
There is one subtle quirk in the code: flush_chain_cache() did free the
global chain cache if not called with a table name but didn't if a table
name was given even if it emptied the chain cache. In other places,
chain_cache being non-NULL prevented a cache update from happening, so
this patch establishes the same behaviour (for each individual chain
cache) since otherwise unexpected cache updates lead to weird problems.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libipt_icmp.c')
0 files changed, 0 insertions, 0 deletions