commit | 9f08ea848117ab521efcfd3e004d8e1a0edc640c | [log] [tgz] |
---|---|---|
author | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Jul 18 20:18:09 2017 +0200 |
committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Jul 24 12:23:16 2017 +0200 |
tree | d1c5ac609cee2c686ca887707497477ac792537b | |
parent | 56a97e701c49ff66dd1a5e5e02775209ab5147d3 [diff] |
netfilter: nf_tables: keep chain counters away from hot path These chain counters are only used by the iptables-compat tool, that allow users to use the x_tables extensions from the existing nf_tables framework. This patch makes nf_tables by ~5% for the general usecase, ie. native nft users, where no chain counters are used at all. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>