<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span> changed
<a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - Atomically updating/reloading a large set with nft -f is excessively slow"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1439">bug 1439</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">Status</td>
<td>ASSIGNED
</td>
<td>RESOLVED
</td>
</tr>
<tr>
<td style="text-align:right;">Resolution</td>
<td>---
</td>
<td>FIXED
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - Atomically updating/reloading a large set with nft -f is excessively slow"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1439#c10">Comment # 10</a>
on <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - Atomically updating/reloading a large set with nft -f is excessively slow"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1439">bug 1439</a>
from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
<pre>(In reply to Timo Sigurdsson from <a href="show_bug.cgi?id=1439#c9">comment #9</a>)
<span class="quote">> (In reply to Pablo Neira Ayuso from <a href="show_bug.cgi?id=1439#c8">comment #8</a>)</span >
[...]
<span class="quote">> > Are you sure you are running a fresh nft binary?
>
> As mentioned in the other bug. You're right. My installation of the fresh
> binaries and libraries was somehow broken. I just assume I was running the
> new build since nft -v returned 0.9.6 (whereas Ubuntu 20.04 ships 0.9.3). I
> reinstalled the custom build from fresh and now it works. Loading the set
> for the first time takes ~0.6s and repeated loads take only slightly longer
> with ~0.9s. All good! Thanks!</span >
Thank you for confirming this works for you.
<span class="quote">> Another question: In a different bug you mentioned that your fix in nftables
> requires also an updated libnftnl. Is there a specific commit in libnftnl
> that is required by your change or does it depend on more changes? I'm
> asking because I'd like to try to backport the fix to Debian stable if the
> changes required are fairly small.</span >
The next nftables version contains support for chain bindings:
<a href="https://git.netfilter.org/nftables/commit/?id=c330152b7f7779f15dba3e0862bf5616e7cb3eab">https://git.netfilter.org/nftables/commit/?id=c330152b7f7779f15dba3e0862bf5616e7cb3eab</a>
This requires this recent update for libftnl:
<a href="http://git.netfilter.org/libnftnl/commit/?id=20e0e8f2bec3b06ba5d77ec17d8e635750f4c085">http://git.netfilter.org/libnftnl/commit/?id=20e0e8f2bec3b06ba5d77ec17d8e635750f4c085</a>
This chain binding support requires Linux kernel 5.9-rc1 (yet to be release,
this is net-next material).
So, if you carefully pick the patches to backport - skipping the patches that
are related to the chain binding support - then you don't need the most recent
version of libnftnl.
Closing this bug.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>