From owner-cvs-src@FreeBSD.ORG Fri Aug 27 16:35:56 2004 Return-Path: Delivered-To: cvs-src@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3C36416A4CE; Fri, 27 Aug 2004 16:35:56 +0000 (GMT) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.186]) by mx1.FreeBSD.org (Postfix) with ESMTP id C6A9E43D1D; Fri, 27 Aug 2004 16:35:55 +0000 (GMT) (envelope-from max@love2party.net) Received: from [212.227.126.208] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1C0jhj-00073T-00; Fri, 27 Aug 2004 18:35:55 +0200 Received: from [217.83.3.211] (helo=donor.laier.local) by mrelayng.kundenserver.de with asmtp (TLSv1:RC4-MD5:128) (Exim 3.35 #1) id 1C0jhi-0005m6-00; Fri, 27 Aug 2004 18:35:55 +0200 From: Max Laier To: Andre Oppermann Date: Fri, 27 Aug 2004 18:34:23 +0200 User-Agent: KMail/1.6.2 References: <200408271516.i7RFGO8L061926@repoman.freebsd.org> <200408271812.18748.max@love2party.net> <412F6108.8C380C17@freebsd.org> In-Reply-To: <412F6108.8C380C17@freebsd.org> MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_QK2LB+NmFWZFh3X"; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200408271834.24506.max@love2party.net> X-Provags-ID: kundenserver.de abuse@kundenserver.de auth:61c499deaeeba3ba5be80f48ecc83056 cc: cvs-src@FreeBSD.org cc: src-committers@FreeBSD.org cc: cvs-all@FreeBSD.org Subject: Re: cvs commit: src/share/man/man4 ipfirewall.4 src/share/man/man9 pfil.9 src/sys/alpha/conf GENERIC src/sys/amd64/conf GENERIC src/sys/conf NOTES files options src/sys/i386/conf GENERIC src/sys/ia64/conf GENERIC SKI src/sys/modules/bridge Makefile ... X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Aug 2004 16:35:56 -0000 --Boundary-02=_QK2LB+NmFWZFh3X Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Friday 27 August 2004 18:27, Andre Oppermann wrote: > Max Laier wrote: > > On Friday 27 August 2004 17:16, Andre Oppermann wrote: > > > andre 2004-08-27 15:16:24 UTC > > > > > > FreeBSD src repository > > > > > > Modified files: > > > share/man/man4 ipfirewall.4 > > > share/man/man9 pfil.9 > > > sys/alpha/conf GENERIC > > > sys/amd64/conf GENERIC > > > sys/conf NOTES files options > > > sys/i386/conf GENERIC > > > sys/ia64/conf GENERIC SKI > > > sys/modules/bridge Makefile > > > sys/net bridge.c > > > sys/netinet ip_fastfwd.c ip_fw_pfil.c ip_input.c > > > ip_output.c ip_var.h > > > sys/netinet6 ip6_forward.c ip6_input.c ip6_output.c > > > ip6_var.h > > > sys/pc98/conf GENERIC > > > sys/powerpc/conf GENERIC > > > sys/sparc64/conf GENERIC > > > . UPDATING > > > Log: > > > Always compile PFIL_HOOKS into the kernel and remove the associated > > > kernel compile option. All FreeBSD packet filters now use the > > > PFIL_HOOKS API and thus it becomes a standard part of the network > > > stack. > > > > > > If no hooks are connected the entire packet filter hooks section and > > > related activities are jumped over. This removes any performance > > > impact if no hooks are active. > > > > Great!!! > > > > Maybe we should hide: > > if (inet_pfil_hook.ph_busy_count =3D=3D -1) > > behind a macro in case we modify the locking for pfil_hooks in the > > future. I am thinking of something like: > > if (PFIL_IS_EMPTY(&inet_pfil_hook)) > > Checking for (inet_pfil_hook.ph_busy_count =3D=3D -1) is the official to = see if > there are any hooks connected. I don't think we need to abstract this in= a > macro. Well, having written the locking there I can tell you that ph_busy_count is= =20 really an *internal* value of the locking and should not be used directly. = At=20 least as long as we want to be able to change the locking at a later point. Right now pfil uses a handrolled sleep lock (as the default sx(9) lock is n= ot=20 very suitable or fast) but this might change in the future. Using=20 ph_busy_count globaly will make that change more difficult. Moreover, I find PFIL_IS_EMPTY much easier to understand. =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --Boundary-02=_QK2LB+NmFWZFh3X Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (FreeBSD) iD8DBQBBL2KQXyyEoT62BG0RAnTLAJ0eqLDrABhHOsBWfocS+qhYrB9T+gCdGppc REq/QZ/5y0l4h2q6erUTaZ8= =t0x2 -----END PGP SIGNATURE----- --Boundary-02=_QK2LB+NmFWZFh3X--