Subject: Re: [PATCH nf-next v5 0/6] Netfilter egress hook

From: Pablo Neira Ayuso <[email-masked]>
Date: Thu, 30 Sep 2021 17:13:37 +0200

On Thu, Sep 30, 2021 at 07:28:35AM -0700, Jakub Kicinski wrote:
> On Thu, 30 Sep 2021 11:21:42 +0200 Pablo Neira Ayuso wrote:
[...]
> The lifetime of this information is constrained, can't it be a percpu
> flag, like xmit_more?

It's just one single bit in this case after all.

> > Probably the sysctl for this new egress hook is the way to go as you
> > suggest.
> 
> Knobs is making users pay, let's do our best to avoid that.

Could you elaborate?

Thanks.