Subject: Re: [PATCH] netfilter: use per-cpu spinlock rather than RCU (v3)

From: Eric Dumazet <[email-masked]>
Date: Wed, 15 Apr 2009 23:07:29 +0200

Stephen Hemminger a écrit :
> Looks like there is some recursive path into ip_tables that makes the
> per-cpu spinlock break.  I get lockup's with KVM networking.
> 
> Suggestions?

Well, it seems original patch was not so bad after all

http://lists.netfilter.org/pipermail/netfilter-devel/2006-January/023175.html

So change per-cpu spinlocks to per-cpu rwlocks 

and use read_lock() in ipt_do_table() to allow recursion...