git: kernel - PF SMP work - fix RDR rules
Matthew Dillon
dillon at crater.dragonflybsd.org
Tue Aug 12 17:00:13 PDT 2014
commit 2b3d9c10edad0a8f26ac702a9206d525aa5cb5f3
Author: Matthew Dillon <dillon at apollo.backplane.com>
Date: Tue Aug 12 16:57:16 2014 -0700
kernel - PF SMP work - fix RDR rules
* Use the global state table for all global-flagged state. RDR
rules can apparently cause PF_SK_WIRE/PF_SK_STACK to be
reversed so our global state table tests which only used
PF_SK_WIRE for GLOBAL-flagged translations were not sufficient.
* Fixes issues with the reverse packet direction for a rdr
rule not finding the reverse state.
* Note that RDR rules will not be SMP-optimal.
* Adds a bit more overhead for NAT translations which are not
SMP optimal (however, most NAT translations select a port
that will be SMP optimal).
Reported-by: alexh
Summary of changes:
sys/net/pf/pf.c | 16 +++++++++++-----
1 file changed, 11 insertions(+), 5 deletions(-)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/2b3d9c10edad0a8f26ac702a9206d525aa5cb5f3
--
DragonFly BSD source repository
More information about the Commits
mailing list