]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: xtables: generate initial table on-demand
authorJan Engelhardt <jengelh@medozas.de>
Wed, 17 Jun 2009 20:14:54 +0000 (22:14 +0200)
committerJan Engelhardt <jengelh@medozas.de>
Wed, 10 Feb 2010 16:50:47 +0000 (17:50 +0100)
commit44eba661e069c453ca1e1072d99ffb74f8bfb258
tree309e522e78f78149ec3cb99ffc386d1b72415a96
parent8a8e6348be755ed1beb5fa9f1b9e9804b8f27377
netfilter: xtables: generate initial table on-demand

The static initial tables are pretty large, and after the net
namespace has been instantiated, they just hang around for nothing.
This commit removes them and creates tables on-demand at runtime when
needed.

Size shrinks by 7735 bytes (x86_64).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
18 files changed:
include/linux/netfilter_arp/arp_tables.h
include/linux/netfilter_ipv4/ip_tables.h
include/linux/netfilter_ipv6/ip6_tables.h
net/ipv4/netfilter/arp_tables.c
net/ipv4/netfilter/arptable_filter.c
net/ipv4/netfilter/ip_tables.c
net/ipv4/netfilter/iptable_filter.c
net/ipv4/netfilter/iptable_mangle.c
net/ipv4/netfilter/iptable_raw.c
net/ipv4/netfilter/iptable_security.c
net/ipv4/netfilter/nf_nat_rule.c
net/ipv6/netfilter/ip6_tables.c
net/ipv6/netfilter/ip6table_filter.c
net/ipv6/netfilter/ip6table_mangle.c
net/ipv6/netfilter/ip6table_raw.c
net/ipv6/netfilter/ip6table_security.c
net/netfilter/x_tables.c
net/netfilter/xt_repldata.h [new file with mode: 0644]