{"id":2222683,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2222683/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260413123712.42993-1-deliran@verdict.gg/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/1.2/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260413123712.42993-1-deliran@verdict.gg>","list_archive_url":null,"date":"2026-04-13T12:37:07","name":"[nf-next] netfilter: nf_conncount: make number of hash slots configurable","commit_ref":null,"pull_url":null,"state":"changes-requested","archived":false,"hash":"7535fc20d52213f1419b16669d86250a37b1b367","submitter":{"id":93133,"url":"http://patchwork.ozlabs.org/api/1.2/people/93133/?format=json","name":"Vladimir Vdovin","email":"deliran@verdict.gg"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260413123712.42993-1-deliran@verdict.gg/mbox/","series":[{"id":499695,"url":"http://patchwork.ozlabs.org/api/1.2/series/499695/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=499695","date":"2026-04-13T12:37:07","name":"[nf-next] netfilter: nf_conncount: make number of hash slots configurable","version":1,"mbox":"http://patchwork.ozlabs.org/series/499695/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2222683/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2222683/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","netfilter-devel@vger.kernel.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=verdict.gg header.i=@verdict.gg header.a=rsa-sha256\n header.s=sig1 header.b=fXFMM9IE;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=2600:3c0a:e001:db::12fc:5321; helo=sea.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-11844-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)","smtp.subspace.kernel.org;\n\tdkim=pass (2048-bit key) header.d=verdict.gg header.i=@verdict.gg\n header.b=\"fXFMM9IE\"","smtp.subspace.kernel.org;\n arc=none smtp.client-ip=57.103.64.241","smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=verdict.gg","smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=verdict.gg"],"Received":["from sea.lore.kernel.org (sea.lore.kernel.org\n [IPv6:2600:3c0a:e001:db::12fc:5321])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fvRsF0phwz1y2d\n\tfor ; Mon, 13 Apr 2026 22:43:13 +1000 (AEST)","from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sea.lore.kernel.org (Postfix) with ESMTP id 739B53027964\n\tfor ; Mon, 13 Apr 2026 12:37:51 +0000 (UTC)","from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 336DF3B8D6C;\n\tMon, 13 Apr 2026 12:37:51 +0000 (UTC)","from outbound.pv.icloud.com (pv-2002c-snip4-11.eps.apple.com\n [57.103.64.241])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id 4069323AE87\n\tfor ; Mon, 13 Apr 2026 12:37:45 +0000 (UTC)","from outbound.pv.icloud.com (unknown [127.0.0.2])\n\tby p00-icloudmta-asmtp-us-west-1a-60-percent-6 (Postfix) with ESMTPS id\n 54F6818006AC;\n\tMon, 13 Apr 2026 12:37:41 +0000 (UTC)","from localhost.localdomain (unknown [17.56.9.36])\n\tby p00-icloudmta-asmtp-us-west-1a-60-percent-6 (Postfix) with ESMTPSA id\n 5605318006B8;\n\tMon, 13 Apr 2026 12:37:39 +0000 (UTC)"],"ARC-Seal":"i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1776083869; cv=none;\n b=ZnDmWbpVnFDhtOF7tBcTvmTXhzw5Ibbu4C7SZ0LgvQ4OkFG/0Q5XjbEEKQ7bbfcf3Ge+32HtCf7pmxKon/FyKYwuc6I0qHqQX7vluXzYJkKqzO+6wiJVW43JkHJ0u7CZ+ad2wZuc2QyR44LE+kpMfEy8BzYWHK6WL3+BjMdC26o=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1776083869; c=relaxed/simple;\n\tbh=Yi2SCb/x739mnqpz6VMd55tLi+SxnfCZQHYhRPRCCXA=;\n\th=From:To:Cc:Subject:Date:Message-ID:MIME-Version;\n b=Sg69WL0H4jWsgNmCeoA50R/a3U/uZGvrWBQ+jw6zORJMxBXVs6OWL2O8/1yt6el5/oeCaUTVVVuLx5ewajGE1ggN33mXfb9YOmMfBkzT0vZVLwirIcEChqIfomG2Nll7fU6U10GrX8YXTBXCWB9ELFX5ZnOt3n203R3GS4memUU=","ARC-Authentication-Results":"i=1; smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=verdict.gg;\n spf=pass smtp.mailfrom=verdict.gg;\n dkim=pass (2048-bit key) header.d=verdict.gg header.i=@verdict.gg\n header.b=fXFMM9IE; arc=none smtp.client-ip=57.103.64.241","Dkim-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=verdict.gg; s=sig1;\n t=1776083865; x=1778675865; bh=O3uMIPCrvYHywSHyF1zNBfItb8oOyRiSHxcpO2wLAug=;\n h=From:To:Subject:Date:Message-ID:MIME-Version:x-icloud-hme;\n b=fXFMM9IE0NJBw4Z/AOIr2TCOsGFHSilp0Fb/Ki95WIZRV8zH095l0qEPT8GelXF5CgoHCbQUX4a/6zGCECE+0pXbfTeTpl5gHBMGBRsgqjZryuwRdvSjhZJXUWU/1iUU3z7sl8aNqhKda7JxK1rHJAeHS2/ED9cKdNLp0Is8/nPE1wMPQNq6gvm/DxuIelzBLFH4U9xRCiv5y5FOxRNd0LtwYCW5HLkvJ0vxGeCjn9gZCQ82H3DtJzOmFFd1GUIUOqhjEaNOztMA3XjBPre4qwDMrcPa+0hpfbbd8j7QYLc9xVMjwGl/tFc3Qweye1ztXDdJj+u0X7oQDFii6P8MCg==","mail-alias-created-date":"1621344842221","From":"Vladimir Vdovin ","To":"netfilter-devel@vger.kernel.org","Cc":"Vladimir Vdovin ,\n\tpablo@netfilter.org,\n\tfw@strlen.de,\n\tcoreteam@netfilter.org,\n\tphil@nwl.cc","Subject":"[PATCH nf-next] netfilter: nf_conncount: make number of hash slots\n configurable","Date":"Mon, 13 Apr 2026 15:37:07 +0300","Message-ID":"<20260413123712.42993-1-deliran@verdict.gg>","X-Mailer":"git-send-email 2.47.0","Precedence":"bulk","X-Mailing-List":"netfilter-devel@vger.kernel.org","List-Id":"","List-Subscribe":"","List-Unsubscribe":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit","X-Proofpoint-Spam-Details-Enc":"AW1haW4tMjYwNDEzMDEyNCBTYWx0ZWRfX0WsI0LtM4Tam\n 612qNyNelxxIOTWL6BnFn3gsDXavxkoeOaqK93ajmd3zOnZ28mcLcsybA6K3N78zD3XTimLHXvW\n IWTZGqEopmhFOjJzrOFXQeQkf59APVyPQHKF2pwdjTZzgJhv9q+zG6vGyvcymaMEiKTVxnOqDhO\n 2BVqr/PuTSj72eIPROjpbxXzIyV7ukNJ0A1IP/M5sSx9GSGA3sVjkrRyb96JqHPOad7Spx3E9Qt\n XMi9Io1cTDJB0j7S1ewNsDiHn6yAOGbBpI5FfEZrWgfDqHBm4lz/1vCjdm/5Bx6xH/zTjME9sBq\n VOGWanXZZE6HI8EWi/iWUQ4ft6UM6icExoRrg5PzO+wIIRkkkTV4md2KIr36HE=","X-Proofpoint-GUID":"nu28hS9DGZQLQKXZo1odM1j2WesxA4bo","X-Authority-Info-Out":"v=2.4 cv=B9K0EetM c=1 sm=1 tr=0 ts=69dce397\n cx=c_apl:c_pps:t_out a=azHRBMxVc17uSn+fyuI/eg==:117\n a=azHRBMxVc17uSn+fyuI/eg==:17 a=A5OVakUREuEA:10 a=VkNPw1HP01LnGYTKEx00:22\n a=E3O_fn2r2lR9tnkCD14A:9","X-Proofpoint-ORIG-GUID":"nu28hS9DGZQLQKXZo1odM1j2WesxA4bo","X-Proofpoint-Virus-Version":"vendor=baseguard\n engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.51,FMLib:17.12.100.49\n definitions=2026-04-13_03,2026-04-13_01,2025-10-01_01","X-Proofpoint-Spam-Details":"rule=notspam policy=default score=0 bulkscore=0\n clxscore=1030 adultscore=0 suspectscore=0 malwarescore=0 lowpriorityscore=0\n spamscore=0 mlxlogscore=772 phishscore=0 mlxscore=0 classifier=spam\n authscore=0 adjust=0 reason=mlx scancount=1 engine=8.22.0-2601150000\n definitions=main-2604130124"},"content":"Some workloads with high conntrack rate\ngenerate high lock contention on insert_tree(), so\nconstant 256 CONNCOUNT_SLOTS can be too small.\n\nSigned-off-by: Vladimir Vdovin \n---\n net/netfilter/Kconfig | 12 ++++++++++++\n net/netfilter/nf_conncount.c | 2 +-\n 2 files changed, 13 insertions(+), 1 deletion(-)\n\n\nbase-commit: 028ef9c96e96197026887c0f092424679298aae8","diff":"diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig\nindex 6cdc994fdc8a..38df2829d4d6 100644\n--- a/net/netfilter/Kconfig\n+++ b/net/netfilter/Kconfig\n@@ -111,6 +111,18 @@ if NF_CONNTRACK\n config NETFILTER_CONNCOUNT\n \ttristate\n \n+config NF_CONNCOUNT_SLOTS\n+\tint \"Number of hash slots for nf_conncount\"\n+\tdepends on NF_CONNTRACK\n+\tdefault 256\n+\trange 1 4096\n+\thelp\n+\t Number of hash slots used by the nf_conncount module.\n+\t Each slot has its own spinlock and rb-tree, so increasing\n+\t this value reduces lock contention at the cost of additional\n+\t memory.\n+\t Default is 256. Allowed range: 1 - 4096.\n+\n config NF_CONNTRACK_MARK\n \tbool 'Connection mark tracking support'\n \tdepends on NETFILTER_ADVANCED\ndiff --git a/net/netfilter/nf_conncount.c b/net/netfilter/nf_conncount.c\nindex 00eed5b4d1b1..bdb9081a6c05 100644\n--- a/net/netfilter/nf_conncount.c\n+++ b/net/netfilter/nf_conncount.c\n@@ -32,7 +32,7 @@\n #include \n #include \n \n-#define CONNCOUNT_SLOTS\t\t256U\n+#define CONNCOUNT_SLOTS\t\tCONFIG_NF_CONNCOUNT_SLOTS\n \n #define CONNCOUNT_GC_MAX_NODES\t\t8\n #define CONNCOUNT_GC_MAX_COLLECT\t64\n","prefixes":["nf-next"]}