188bab3ae0
When you've enabled conntrack and NAT as a module (standard case in all distributions), and you've also enabled the new conntrack netlink interface, loading ip_conntrack_netlink.ko will auto-load iptable_nat.ko. This causes a huge performance penalty, since for every packet you iterate the nat code, even if you don't want it. This patch splits iptable_nat.ko into the NAT core (ip_nat.ko) and the iptables frontend (iptable_nat.ko). Threfore, ip_conntrack_netlink.ko will only pull ip_nat.ko, but not the frontend. ip_nat.ko will "only" allocate some resources, but not affect runtime performance. This separation is also a nice step in anticipation of new packet filters (nf-hipac, ipset, pkttables) being able to use the NAT core. Signed-off-by: Harald Welte <laforge@netfilter.org> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
|---|---|---|
| .. | ||
| ip_conntrack.h | ||
| ip_conntrack_amanda.h | ||
| ip_conntrack_core.h | ||
| ip_conntrack_ftp.h | ||
| ip_conntrack_helper.h | ||
| ip_conntrack_icmp.h | ||
| ip_conntrack_irc.h | ||
| ip_conntrack_pptp.h | ||
| ip_conntrack_proto_gre.h | ||
| ip_conntrack_protocol.h | ||
| ip_conntrack_sctp.h | ||
| ip_conntrack_tcp.h | ||
| ip_conntrack_tftp.h | ||
| ip_conntrack_tuple.h | ||
| ip_nat.h | ||
| ip_nat_core.h | ||
| ip_nat_helper.h | ||
| ip_nat_pptp.h | ||
| ip_nat_protocol.h | ||
| ip_nat_rule.h | ||
| ip_queue.h | ||
| ip_tables.h | ||
| ipt_addrtype.h | ||
| ipt_ah.h | ||
| ipt_CLASSIFY.h | ||
| ipt_CLUSTERIP.h | ||
| ipt_comment.h | ||
| ipt_connbytes.h | ||
| ipt_CONNMARK.h | ||
| ipt_connmark.h | ||
| ipt_conntrack.h | ||
| ipt_dccp.h | ||
| ipt_dscp.h | ||
| ipt_DSCP.h | ||
| ipt_ecn.h | ||
| ipt_ECN.h | ||
| ipt_esp.h | ||
| ipt_hashlimit.h | ||
| ipt_helper.h | ||
| ipt_iprange.h | ||
| ipt_length.h | ||
| ipt_limit.h | ||
| ipt_LOG.h | ||
| ipt_mac.h | ||
| ipt_MARK.h | ||
| ipt_mark.h | ||
| ipt_multiport.h | ||
| ipt_NFQUEUE.h | ||
| ipt_owner.h | ||
| ipt_physdev.h | ||
| ipt_pkttype.h | ||
| ipt_realm.h | ||
| ipt_recent.h | ||
| ipt_REJECT.h | ||
| ipt_SAME.h | ||
| ipt_sctp.h | ||
| ipt_state.h | ||
| ipt_string.h | ||
| ipt_TCPMSS.h | ||
| ipt_tcpmss.h | ||
| ipt_TOS.h | ||
| ipt_tos.h | ||
| ipt_TTL.h | ||
| ipt_ttl.h | ||
| ipt_ULOG.h | ||
| listhelp.h | ||