netfilter: nf_tables: do not remove elements if set backend implements .abort
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 4 Oct 2023 11:12:58 +0000 (13:12 +0200)
committerFlorian Westphal <fw@strlen.de>
Thu, 12 Oct 2023 08:28:45 +0000 (10:28 +0200)
commitebd032fa881882fef2acb9da1bbde48d8233241d
tree83871ffff8fcb84c0ab1da4c3c01ffa91c3cb555
parent50e492143374c17ad89c865a1a44837b3f5c8226
netfilter: nf_tables: do not remove elements if set backend implements .abort

pipapo set backend maintains two copies of the datastructure, removing
the elements from the copy that is going to be discarded slows down
the abort path significantly, from several minutes to few seconds after
this patch.

Fixes: 212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nf_tables_api.c