[PATCH] ng_pf and l7 filtering possibility with PF

Ermal Luçi ermal.luci at gmail.com
Wed May 30 15:26:03 UTC 2007


Alexander,

the only reason i made them available only for debugging is cause of
int32_t types of those counter  and these could overflow easily on
busy environments.
For 64bit counters on 32bit archs you need atomic operations and i
don't know how much overhead it will be!?(correct me if i am wrong)


On 5/30/07, Alexander Motin <mav at freebsd.org> wrote:
> Hi.
>
> Ermal Luçi wrote:
> > 4- The node has these messages:
> > #ifdef NG_PF_DEBUG
> >       NGM_PF_GET_STATS,       (number of packets in/out)
> >       NGM_PF_CLR_STATS,
> >       NGM_PF_GETCLR_STATS,
> > #endif
>
> What for comment them out? To save CPU on several addition operations?
> This stats could be used not only by developers but also by users and
> they may not be to rebuild kernel module to get that stats.
>
> --
> Alexander Motin
>


More information about the freebsd-pf mailing list