<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Nft is slow when loading ruleset with lots of add element calls of different interval maps"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1706">1706</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Nft is slow when loading ruleset with lots of add element calls of different interval maps
</td>
</tr>
<tr>
<th>Product</th>
<td>nftables
</td>
</tr>
<tr>
<th>Version</th>
<td>1.0.x
</td>
</tr>
<tr>
<th>Hardware</th>
<td>x86_64
</td>
</tr>
<tr>
<th>OS</th>
<td>Debian GNU/Linux
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>nft
</td>
</tr>
<tr>
<th>Assignee</th>
<td>pablo@netfilter.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>jannh@selfnet.de
</td>
</tr></table>
<p>
<div>
<pre>Attached there is an "example.conf" file containing a simple set of very
repetitive rules with 4 interval maps and add element calls to fill these maps
with ~16000 entries.
On our Debian bookworm (nftables 1.0.6) and ArchLinux (1.0.8) hosts, the
resulting rules take very long to load with "nft -f" (at least multiple
minutes). It seems the size of the maps itself is not the issue, since there
are other maps in our ruleset which have no issues.
Further info of things we have tested:
- With a regular map instead of an interval map (just remove the "flags
interval" in the example), the rules are loaded in fractions of a second
- Ordering the add element calls by map (i.e. when all add element calls of
each map are put together instead of mixing these), it loads as fast as
expected
- We have had no issues with this kind of ruleset on Debian Bullseye (Kernel
5.10, nftables 0.9.8), it seems to have been introduced later
Thanks for taking a look!</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>