[Bug 1127] running nft command creates lag for forwarded packets

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1127

--- Comment #6 from Karel Rericha <karel at unitednetworks.cz> ---
Patch didnt help Pablo. Listing this small set each second from patched box:

testbox ~ # nft list set filter private
table ip filter {
        set private {
                type ipv4_addr
                flags interval
                elements = { 10.0.0.0/8, 100.64.0.0/10, 172.16.0.0/12,
192.168.0.0/16}
        }
}

testbox ~ # watch -n 1 nft list set filter private > /dev/null


and testing latencies of packets going through this box (actual traffic is
1.2Gbps, real address is replaced by a.b.c.d):

karel2 karel # ping a.b.c.d -i 0.1
PING a.b.c.d (a.b.c.d) 56(84) bytes of data.
64 bytes from a.b.c.d: icmp_seq=1 ttl=60 time=5.58 ms
64 bytes from a.b.c.d: icmp_seq=2 ttl=60 time=5.44 ms
64 bytes from a.b.c.d: icmp_seq=3 ttl=60 time=14.8 ms
64 bytes from a.b.c.d: icmp_seq=4 ttl=60 time=83.1 ms
64 bytes from a.b.c.d: icmp_seq=5 ttl=60 time=5.57 ms
64 bytes from a.b.c.d: icmp_seq=6 ttl=60 time=5.55 ms
64 bytes from a.b.c.d: icmp_seq=7 ttl=60 time=5.54 ms
64 bytes from a.b.c.d: icmp_seq=8 ttl=60 time=5.55 ms
64 bytes from a.b.c.d: icmp_seq=9 ttl=60 time=5.54 ms
64 bytes from a.b.c.d: icmp_seq=10 ttl=60 time=5.55 ms
64 bytes from a.b.c.d: icmp_seq=11 ttl=60 time=5.48 ms
64 bytes from a.b.c.d: icmp_seq=12 ttl=60 time=5.62 ms
64 bytes from a.b.c.d: icmp_seq=13 ttl=60 time=5.44 ms
64 bytes from a.b.c.d: icmp_seq=14 ttl=60 time=5.47 ms
64 bytes from a.b.c.d: icmp_seq=15 ttl=60 time=5.48 ms
64 bytes from a.b.c.d: icmp_seq=16 ttl=60 time=5.49 ms
64 bytes from a.b.c.d: icmp_seq=17 ttl=60 time=5.70 ms
64 bytes from a.b.c.d: icmp_seq=18 ttl=60 time=109 ms
64 bytes from a.b.c.d: icmp_seq=19 ttl=60 time=18.4 ms
64 bytes from a.b.c.d: icmp_seq=20 ttl=60 time=5.56 ms
64 bytes from a.b.c.d: icmp_seq=21 ttl=60 time=5.50 ms
64 bytes from a.b.c.d: icmp_seq=22 ttl=60 time=5.55 ms
64 bytes from a.b.c.d: icmp_seq=23 ttl=60 time=5.51 ms
64 bytes from a.b.c.d: icmp_seq=24 ttl=60 time=5.51 ms
64 bytes from a.b.c.d: icmp_seq=25 ttl=60 time=5.47 ms
64 bytes from a.b.c.d: icmp_seq=26 ttl=60 time=5.55 ms
64 bytes from a.b.c.d: icmp_seq=27 ttl=60 time=5.45 ms
64 bytes from a.b.c.d: icmp_seq=28 ttl=60 time=5.55 ms
64 bytes from a.b.c.d: icmp_seq=29 ttl=60 time=5.48 ms
64 bytes from a.b.c.d: icmp_seq=30 ttl=60 time=5.53 ms
64 bytes from a.b.c.d: icmp_seq=31 ttl=60 time=5.51 ms
64 bytes from a.b.c.d: icmp_seq=32 ttl=60 time=28.1 ms
64 bytes from a.b.c.d: icmp_seq=33 ttl=60 time=49.2 ms
64 bytes from a.b.c.d: icmp_seq=34 ttl=60 time=5.47 ms
64 bytes from a.b.c.d: icmp_seq=35 ttl=60 time=5.57 ms
64 bytes from a.b.c.d: icmp_seq=36 ttl=60 time=5.54 ms
64 bytes from a.b.c.d: icmp_seq=37 ttl=60 time=5.51 ms
64 bytes from a.b.c.d: icmp_seq=38 ttl=60 time=5.45 ms
64 bytes from a.b.c.d: icmp_seq=39 ttl=60 time=5.54 ms
64 bytes from a.b.c.d: icmp_seq=40 ttl=60 time=5.54 ms
64 bytes from a.b.c.d: icmp_seq=41 ttl=60 time=5.54 ms
64 bytes from a.b.c.d: icmp_seq=42 ttl=60 time=5.59 ms
64 bytes from a.b.c.d: icmp_seq=43 ttl=60 time=5.49 ms
64 bytes from a.b.c.d: icmp_seq=44 ttl=60 time=5.49 ms
64 bytes from a.b.c.d: icmp_seq=45 ttl=60 time=5.53 ms
64 bytes from a.b.c.d: icmp_seq=46 ttl=60 time=26.3 ms
64 bytes from a.b.c.d: icmp_seq=47 ttl=60 time=84.3 ms
64 bytes from a.b.c.d: icmp_seq=48 ttl=60 time=5.46 ms
64 bytes from a.b.c.d: icmp_seq=49 ttl=60 time=5.54 ms
64 bytes from a.b.c.d: icmp_seq=50 ttl=60 time=5.47 ms

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170309/8976672f/attachment.html>