netfilter: connlimit: use kmem_cache for conn objects
authorFlorian Westphal <fw@strlen.de>
Fri, 7 Mar 2014 13:37:12 +0000 (14:37 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 12 Mar 2014 12:55:03 +0000 (13:55 +0100)
commit14e1a977767e95ca48504975efff2bdf1b198ca0
tree62ed6b64a16d079df973ae1d9898bd76a68b8f20
parent3bcc5fdf1b1a00be162159c420ea04e0adf709ec
netfilter: connlimit: use kmem_cache for conn objects

We might allocate thousands of these (one object per connection).
Use distinct kmem cache to permit simplte tracking on how many
objects are currently used by the connlimit match via the sysfs.

Reviewed-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/xt_connlimit.c