Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-132852

Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • None
    • Low
    • Hide
      a4400a5b343d1bc4aa8f685608515413238e7ee2
      e19079adcd26a25d7d3e586b1837493361fdf8b6
      Show
      a4400a5b343d1bc4aa8f685608515413238e7ee2 e19079adcd26a25d7d3e586b1837493361fdf8b6
    • rhel-net-firewall
    • 26
    • 0
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Enhancement
    • Hide
      Feature, enhancement: Applications that use nfnetlink_queue and provide verdicts out-of-order will see improved performance.
      Reason: The nfnetlink_queue module searches the to-be-processed verdict by a monotonically increasing ID, the packets are stored in a list that has to be searched. The change provides a hash table based search.
      Result: Better performance for out-of-order verdict case. The change is transparent for applications, there are no changes in the API or expected behaviour.
      Show
      Feature, enhancement: Applications that use nfnetlink_queue and provide verdicts out-of-order will see improved performance. Reason: The nfnetlink_queue module searches the to-be-processed verdict by a monotonically increasing ID, the packets are stored in a list that has to be searched. The change provides a hash table based search. Result: Better performance for out-of-order verdict case. The change is transparent for applications, there are no changes in the API or expected behaviour.
    • Proposed
    • Required
    • Unspecified
    • Unspecified
    • None
    • Merge Request passes all submitter checks, Merge Request finished CI testing, Merge Request passed CI testing

      Customer would like the following patch to be included in RHEL 9, including a backport to RHEL 9.6 and inclusion in RHEL 9.8. Here is a link to the latest version:

      https://lore.kernel.org/netfilter-devel/20251122003720.16724-1-scott_mitchell@apple.com/

      This patch series greatly improves performance for one of their networking hot paths across fleet. It’s been testing upstream as well as in their fleet, and is self contained.

              fwestpha@redhat.com Florian Westphal
              rhn-support-edeassis Eduardo de Assis
              Florian Westphal Florian Westphal
              Yi Chen Yi Chen
              Marc Muehlfeld Marc Muehlfeld
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated: