netdev - Re: fedora 14 kernel performance with ip forwarding workload

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 06 Apr 2011 12:12:08 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	jesse.brandeburg@...il.com
Cc:	fedora-kernel-list@...hat.com, jesse.brandeburg@...el.com,
	netdev@...r.kernel.org
Subject: Re: fedora 14 kernel performance with ip forwarding workload

From: Jesse Brandeburg <jesse.brandeburg@...il.com>
Date: Wed, 6 Apr 2011 11:51:06 -0700

> perf showed netfilter being prominent, and removing it gives me much
> higher throughput.  Is there a reason CONFIG_NETFILTER=y ?  Isn't it a
> good thing to be able to disable netfilter if you want to?

CONFIG_NETFILTER=y is the only possible non-disabled setting, as it's
a boolean.

All that is enabling is the hooks, and it's not possible to provide
netfilter at all without the hooks being compiled into the kernel
image.

Fedora by default is also probably installing several defauly
netfilter rules, make sure to remove them.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html