From nobody Mon Aug 3 21:56:15 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDVqn1fPJz6n69t for ; Mon, 03 Aug 2026 21:56:21 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDVqm6lF9z3JJj for ; Mon, 03 Aug 2026 21:56:20 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785794180; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=bxqFpMNdvfyfRv4MBfal2ToMCbllfmZkOS6uAAiGHUE=; b=qPLzb6vRYj6KH15qSFA+omoMim5z15x8a31B/ycrEuUBiCFVzU4QwoHG7o4iMEKq0rH9Ya J1QswEXNK18sPQaBnSbYrTrOT+ksXQ157gfxfOGEMgQZF/c0SLjRfF2sc010YKpPe/yigR SONostX5CrhSQf85rkfLrDRH1Jo9w4A4+ZzzVGQbmrtMn18tZ1ia00dVsLjWSUUFGcGLTp YOcbWAaWyvcDZl9pWEcHenrCATfSzsv4/fludP/cFM8kTcED0+qU9Fp47RB3A8ivk030yN RHIWOeZ5ocHdg2X64CBuSzuC42x8ZPYdSxDGmhHQs79UW6V8rvGykJA9dOQeiw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785794180; a=rsa-sha256; cv=none; b=s0Wy5ZIbUn5c/kIh3at1ozY934BP+TSQF2adcD7Ta4z87xx9pq3fCW614TtVq5J4JdRNxf NONQVjQl5dbu/uFRWSNfYCOICsGnxBfluG+QfVvpIjLIBkL+9SwYly5QZQ4g6twXeawb0M i40eP5ts3HXzdqMdWGx0A6zaJe5ZsBzNL0UuJ6M5MAIypGCZ3nJTtmj1HP0C9OIY+Sy/Iu zh8KRpYyOtD9SK+Pk+9jr2qSFSqcGEwJY/IdhFCoBLyGZz2IH5gCkNHDW1TXpSieuZGr7x uuuIy6QI9PGEdigRSy5qdZKUv/Q/RM3ospftATKuEtrS4d6UyVyWC0hMNSxYsQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785794180; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=bxqFpMNdvfyfRv4MBfal2ToMCbllfmZkOS6uAAiGHUE=; b=CqfX9X1owXDmbrIrO13HpgOLfO/6e1ZGtYIrOXhBiSUWCH6bTqrMohREfTJr+Mj/S6okMq LmEhPC50x+qo5wyNV3RpE+0CTiZcMNVCyEPQ+n4LY4NkskrQlIAHpXN/DTlqNbwrhl4866 WHW3b+MnhVvr5PYmPzLUF3GpN5ABLNsLqLV2AqMW/fJDDRm01NmK21bHWeTzmF7XIqgMMs y4d/WdcQ7PMxXzx2NLZAklB7bIfkpkLnKKGAm27leEV3lFtUQbhnSBEmljAJEuSWpBvkEX Ofn7sNLdkoP4pt+4QTGLlHgyB35sf5sVHfMyE6kxHFGI6iO/5ijGYG0tFMds9w== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4hDVqm57d7z3Cl for ; Mon, 03 Aug 2026 21:56:20 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3d79f by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Mon, 03 Aug 2026 21:56:15 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Gleb Smirnoff Subject: git: d3a0bf0a79ef - main - ng_ipfw: provide a tree for faster hook lookup List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: glebius X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: d3a0bf0a79efb0a28d85d48c88d14bc5d89ab00a Auto-Submitted: auto-generated Date: Mon, 03 Aug 2026 21:56:15 +0000 Message-Id: <6a710e7f.3d79f.2848799c@gitrepo.freebsd.org> The branch main has been updated by glebius: URL: https://cgit.FreeBSD.org/src/commit/?id=d3a0bf0a79efb0a28d85d48c88d14bc5d89ab00a commit d3a0bf0a79efb0a28d85d48c88d14bc5d89ab00a Author: Gleb Smirnoff AuthorDate: 2026-08-03 21:55:14 +0000 Commit: Gleb Smirnoff CommitDate: 2026-08-03 21:55:14 +0000 ng_ipfw: provide a tree for faster hook lookup This should assist setups that connect a lot of nodes to ipfw: and then distribute traffic with ipfw(4) tablearg feature. Reviewed by: pouria Differential Revision: https://reviews.freebsd.org/D58547 --- sys/netgraph/ng_ipfw.c | 47 ++++++++++++++++++++++++++++++++++++----------- 1 file changed, 36 insertions(+), 11 deletions(-) diff --git a/sys/netgraph/ng_ipfw.c b/sys/netgraph/ng_ipfw.c index 9a6bb90412fa..f79b968f7ccb 100644 --- a/sys/netgraph/ng_ipfw.c +++ b/sys/netgraph/ng_ipfw.c @@ -93,14 +93,28 @@ MODULE_DEPEND(ng_ipfw, ipfw, 3, 3, 3); /* Information we store for each hook */ struct ng_ipfw_hook_priv { - hook_p hook; + RB_ENTRY(ng_ipfw_hook_priv) entry; + hook_p hook; uint32_t cookie; }; typedef struct ng_ipfw_hook_priv *hpriv_p; +/* Per-node private data */ +struct ngipfw { + RB_HEAD(ngipfw_tree, ng_ipfw_hook_priv) hooks; +}; + +static inline int +ng_ipfw_hook_compare(const hpriv_p a, const hpriv_p b) +{ + return ((a->cookie > b->cookie) - (a->cookie < b->cookie)); +} +RB_GENERATE_STATIC(ngipfw_tree, ng_ipfw_hook_priv, entry, ng_ipfw_hook_compare); + static int ng_ipfw_mod_event(module_t mod, int event, void *data) { + struct ngipfw *priv; int error = 0; switch (event) { @@ -111,14 +125,16 @@ ng_ipfw_mod_event(module_t mod, int event, void *data) break; } - /* Setup node without any private data */ if ((error = ng_make_node_common(&ng_ipfw_typestruct, &fw_node)) != 0) { log(LOG_ERR, "%s: can't create ng_ipfw node", __func__); break; } - /* Try to name node */ + priv = malloc(sizeof(*priv), M_NETGRAPH, M_WAITOK); + RB_INIT(&priv->hooks); + NG_NODE_SET_PRIVATE(fw_node, priv); + if (ng_name_node(fw_node, "ipfw") != 0) log(LOG_WARNING, "%s: failed to name node \"ipfw\"", __func__); @@ -151,6 +167,7 @@ ng_ipfw_constructor(node_p node) static int ng_ipfw_newhook(node_p node, hook_p hook, const char *name) { + struct ngipfw *priv = NG_NODE_PRIVATE(node); hpriv_p hpriv; uint32_t cookie; const char *cp; @@ -180,7 +197,10 @@ ng_ipfw_newhook(node_p node, hook_p hook, const char *name) NG_HOOK_SET_PRIVATE(hook, hpriv); - return(0); + hpriv = RB_INSERT(ngipfw_tree, &priv->hooks, hpriv); + MPASS(hpriv == NULL); + + return (0); } /* @@ -211,14 +231,12 @@ ng_ipfw_findhook(node_p node, const char *name) static hook_p ng_ipfw_findhook1(node_p node, uint32_t cookie) { - hook_p hook; - hpriv_p hpriv; + struct ngipfw *priv = NG_NODE_PRIVATE(node); + struct ng_ipfw_hook_priv key = { .cookie = cookie }, *hpriv; - LIST_FOREACH(hook, &node->nd_hooks, hk_hooks) { - hpriv = NG_HOOK_PRIVATE(hook); - if (NG_HOOK_IS_VALID(hook) && (hpriv->cookie == cookie)) - return (hook); - } + hpriv = RB_FIND(ngipfw_tree, &priv->hooks, &key); + if (hpriv != NULL && NG_HOOK_IS_VALID(hpriv->hook)) + return (hpriv->hook); return (NULL); } @@ -334,6 +352,7 @@ ng_ipfw_input(struct mbuf **m0, struct ip_fw_args *fwa, bool tee) static int ng_ipfw_shutdown(node_p node) { + struct ngipfw *priv = NG_NODE_PRIVATE(node); /* * After our single node has been removed, @@ -342,14 +361,20 @@ ng_ipfw_shutdown(node_p node) */ ng_ipfw_input_p = NULL; NG_NODE_UNREF(node); + + MPASS(RB_EMPTY(&priv->hooks)); + free(priv, M_NETGRAPH); + return (0); } static int ng_ipfw_disconnect(hook_p hook) { + struct ngipfw *priv = NG_NODE_PRIVATE(NG_HOOK_NODE(hook)); const hpriv_p hpriv = NG_HOOK_PRIVATE(hook); + RB_REMOVE(ngipfw_tree, &priv->hooks, hpriv); free(hpriv, M_NETGRAPH); NG_HOOK_SET_PRIVATE(hook, NULL);