Subject: Re: [Patch nf-next] netfilter: make xt_rateest hash table per net

From: Eric Dumazet <[email-masked]>
Date: Thu, 01 Mar 2018 20:21:52 -0800

On Thu, 2018-03-01 at 18:58 -0800, Cong Wang wrote:
> As suggested by Eric, we need to make the xt_rateest
> hash table and its lock per netns to reduce lock
> contentions.
> 
> Cc: Florian Westphal <[email-masked]>
> Cc: Eric Dumazet <[email-masked]>
> Cc: Pablo Neira Ayuso <[email-masked]>
> Signed-off-by: Cong Wang <[email-masked]>
> ---
>  include/net/netfilter/xt_rateest.h |  4 +-
>  net/netfilter/xt_RATEEST.c         | 91 +++++++++++++++++++++++++++-----------
>  net/netfilter/xt_rateest.c         | 10 ++---
>  3 files changed, 72 insertions(+), 33 deletions(-)

Very nice, thanks !

Reviewed-by: Eric Dumazet <[email-masked]>

Although the main reason was to avoid name collisions between different
netns.

Hash table is small enough that it can be allocated for each netns.