netfilter: conntrack: resched gc again if eviction rate is high
authorFlorian Westphal <fw@strlen.de>
Thu, 25 Aug 2016 13:33:34 +0000 (15:33 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 30 Aug 2016 09:43:09 +0000 (11:43 +0200)
commitc023c0e4a0eb7f0dfebe29b41801bf7373bf4f1d
tree305690a520a7cc64387314baa74eca78a0b323ab
parentb87a2f9199ea82eaadca5bcc596b62cb8214cc0a
netfilter: conntrack: resched gc again if eviction rate is high

If we evicted a large fraction of the scanned conntrack entries re-schedule
the next gc cycle for immediate execution.

This triggers during tests where load is high, then drops to zero and
many connections will be in TW/CLOSE state with < 30 second timeouts.

Without this change it will take several minutes until conntrack count
comes back to normal.

Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_core.c