On Thu, Oct 12, 2006 at 12:39:30PM +0200, Eric Dumazet ([EMAIL PROTECTED]) 
wrote:
> > You should break your decision into per state change transformations.
> > I think it is possible with either conntrack or netlink module Samir
> > Bellabes <sbellabes_mandriva.com> creates (Network Events Connector
> > subject) or even using syncookie algo changes.
> 
> Hum.. they are some cases where conntrack is not an option (way too expensive 
> if your server handle XXX.XXX concurrent tcp streams)

I think any netlink related work here can not be used for any kind of
high performance setup - it will be too slow to send/receive one or more
messages per state change for each new connection...

> > But it will drastically change your server performance...
> 
> Sure, at least its capacity to answer to SYN packets (session establishment 
> should be slower, unless the thread receiving/handling SYN packets has 
> realtime scheduling)

Maybe it will be better to create some more complex protocol which will
collect data before sending netlink message, or just use a procfs file
or syscall/ioctl/socket option.

> Eric

-- 
        Evgeniy Polyakov
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to