Re: [OpenWrt-Devel] [PATCH] generic: Fix per interface nf_call_iptables setting

2015-09-03 Thread Sven Eckelmann
On Thursday 03 September 2015 13:31:32 Sven Eckelmann wrote: > On Thursday 03 September 2015 12:52:07 Felix Fietkau wrote: > [...] > > Did your test have the ebtables modules loaded or not? If I remember > > correctly, the patch you're removing was added mainly for the case where > > CONFIG_BRIDGE_

Re: [OpenWrt-Devel] [PATCH] generic: Fix per interface nf_call_iptables setting

2015-09-03 Thread Sven Eckelmann
On Thursday 03 September 2015 12:52:07 Felix Fietkau wrote: [...] > Did your test have the ebtables modules loaded or not? If I remember > correctly, the patch you're removing was added mainly for the case where > CONFIG_BRIDGE_NETFILTER=y is set, but ebtables is not loaded. No, ebtables was not l

Re: [OpenWrt-Devel] [PATCH] generic: Fix per interface nf_call_iptables setting

2015-09-03 Thread Felix Fietkau
On 2015-09-02 19:47, Sven Eckelmann wrote: > commit r30917 ("kernel: bypass all netfilter hooks if the sysctls for that > functionality have been disabled - eliminates the overhead of enabling > CONFIG_BRIDGE_NETFILTER in the kernel config") introduced an optimization > which should reduce/eliminat

Re: [OpenWrt-Devel] [PATCH] generic: Fix per interface nf_call_iptables setting

2015-09-03 Thread Sven Eckelmann
On Wednesday 02 September 2015 19:47:43 Sven Eckelmann wrote: [...] > | kernel | br-nf-* global | nf-call* iface | download | upload | > |-|||--|--| > | default | 0 | - | 209 | 268

Re: [OpenWrt-Devel] [PATCH] generic: Fix per interface nf_call_iptables setting

2015-09-02 Thread Sven Eckelmann
On Wednesday 02 September 2015 19:47:43 Sven Eckelmann wrote: [...] > | kernel | br-nf-* global | nf-call* iface | download | upload | > |-|||--|--| > | default | 0 | - | 209 | 268

[OpenWrt-Devel] [PATCH] generic: Fix per interface nf_call_iptables setting

2015-09-02 Thread Sven Eckelmann
commit r30917 ("kernel: bypass all netfilter hooks if the sysctls for that functionality have been disabled - eliminates the overhead of enabling CONFIG_BRIDGE_NETFILTER in the kernel config") introduced an optimization which should reduce/eliminate the overhead for traffic send over bridges on ker