Hi, I would like to request a -stable backport for the following patchset that as we speak can be found in pablo's nf-next:
# git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git [PATCH 1/3] commit 2394ae21e8b652aff0db1c02e946243c1e2f5edb netfilter: x_tables: pass xt_counters struct instead of packet counter [PATCH 2/3] commit 18b61e8161cc308cbfd06d2e2c6c0758dfd925ef netfilter: x_tables: pass xt_counters struct to counter allocator [PATCH 3/3] commit 722d6785e3b29a3b9f95c4d77542a1416094786a netfilter: x_tables: pack percpu counter allocations Please add this to stable branches : v4.4.x, v4.8.x The above patchset is fixing a netfilter regression which introduced a performance slowdown in binary arp/ip/ip6tables starting at commit : #v4.2-rc1 commit 71ae0dff02d756e4d2ca710b79f2ff5390029a5f netfilter: xtables: use percpu rule counters Regards, Eric
