From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Laight Subject: RE: [PATCH 05/20] netfilter: nft_hash: add support for timeouts Date: Thu, 9 Apr 2015 13:39:18 +0000 Message-ID: <063D6719AE5E284EB5DD2968C1650D6D1CB17C7C@AcuExch.aculab.com> References: <1428579304-5520-1-git-send-email-pablo@netfilter.org> <1428579304-5520-6-git-send-email-pablo@netfilter.org> Mime-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 8BIT Cc: "davem@davemloft.net" , "netdev@vger.kernel.org" To: 'Pablo Neira Ayuso' , "netfilter-devel@vger.kernel.org" Return-path: Received: from smtp-out4.electric.net ([192.162.216.185]:61284 "EHLO smtp-out4.electric.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753138AbbDINky convert rfc822-to-8bit (ORCPT ); Thu, 9 Apr 2015 09:40:54 -0400 In-Reply-To: <1428579304-5520-6-git-send-email-pablo@netfilter.org> Content-Language: en-US Sender: netdev-owner@vger.kernel.org List-ID: From: Pablo Neira Ayuso > Sent: 09 April 2015 12:35 ... > Add support for element timeouts to nft_hash. The lookup and walking > functions are changed to ignore timed out elements, a periodic garbage > collection task cleans out expired entries. You probably want to delete timed out entries during insert. If you do that you don't really need a garbage collector. I'd also worry about re-adding a timed out entry. David