kp dd11da4a2a pfsync: Performance improvement ... pfsync code is called for every new state, state update and state deletion in pf. While pf itself can operate on multiple states at the same time (on different cores, assuming the states hash to a different hashrow), pfsync only had a single lock. This greatly reduced throughput on multicore systems. Address this by splitting the pfsync queues into buckets, based on the state id. This ensures that updates for a given connection always end up in the same bucket, which allows pfsync to still collapse multiple updates into one, while allowing multiple cores to proceed at the same time. The number of buckets is tunable, but defaults to 2 x number of cpus. Benchmarking has shown improvement, depending on hardware and setup, from ~30% to ~100%. MFC after: 1 week Sponsored by: Orange Business Services Differential Revision: https://reviews.freebsd.org/D18373		2018-12-06 19:27:15 +00:00
..
ipfw	Add ability to request listing and deleting only for dynamic states.	2018-12-04 16:12:43 +00:00
pf	pfsync: Performance improvement	2018-12-06 19:27:15 +00:00