From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-6.2 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,NICE_REPLY_A, SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 22890C432BE for ; Tue, 31 Aug 2021 13:38:53 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 065F160FE6 for ; Tue, 31 Aug 2021 13:38:53 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S238105AbhHaNjq (ORCPT ); Tue, 31 Aug 2021 09:39:46 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:53548 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S237552AbhHaNjq (ORCPT ); Tue, 31 Aug 2021 09:39:46 -0400 Received: from mail-qv1-xf2f.google.com (mail-qv1-xf2f.google.com [IPv6:2607:f8b0:4864:20::f2f]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 45145C061760 for ; Tue, 31 Aug 2021 06:38:51 -0700 (PDT) Received: by mail-qv1-xf2f.google.com with SMTP id z2so10301324qvl.10 for ; Tue, 31 Aug 2021 06:38:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mojatatu-com.20150623.gappssmtp.com; s=20150623; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=4cVWPMLdDwe2dW8rgQ4O5ZdeEA9NF5jDi3TG/HjqIHs=; b=cbXk1iCt+OXs5GDhDkA23MEwInwGCBR9cNS96bqLK03L+Po0HLdBG1DUreWEh7GxFg EBvcXQvzgnSPD9hEUBJx2x/A4XrAAv8dIH7rxISBxUSHCbqJcBe9KTHURb2wNNIGkgvO kdcOmbarUx95IwcaHf2flxxK7gojU7+tuoAClZF5Sq0wlCZQi7mJqIKr2X1h/82q7A5A u7oCQPyff1dYPnyjb/H0/PBseZPjxh3Xi+EBwdygP86NymVgeF7HJOS5XtDW4W/0QDd/ OURqKfoHKJ4SicHl36z6FkoArJmtdJ1CXgae9Ba9Ktr/uoBgC6ZBjNk/fop7NjqDZgs8 nPDA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=4cVWPMLdDwe2dW8rgQ4O5ZdeEA9NF5jDi3TG/HjqIHs=; b=JYIOq7RxIQuCl94fovLcFjBsuJsJ+uqGIZ/y4x4Nrieia2nyce3Ek/E/Yx2Rga1qNe T3qm8Af1q4n3TZlUxmpTU+sSYw6X+Uf0aRJWtfzV+M+jwMzlyIiQj5FJtMtFOj7niIqX ORyYNGdh5V9m3xIA5p5b59OLuFLryUG/hpMb5y1dtrUhL6TWZcadavEkp+Z/tRyEzFQr pdTAOopiFuBhFIIHQWBEEQY4jR/grMKCD8hHbWU1T+YQOhfv0aJMBerRKh2L66yoDZuf vb3kPmLnawpMfq3EEiFArlwlKIXyWyTAKFnHR3Wmgl26tfXUgqql1dOt4/1ni724aOEC UuXQ== X-Gm-Message-State: AOAM532ObFeNyjv+sVHTjePPBZHkKHh9fU4Jec8hCToNqxeGx9cCm8j6 J55yGcwKLj9IbcGUaYVTmddzDw== X-Google-Smtp-Source: ABdhPJzW8Kv2XuLtrO1TP3JccBuX8ufuM05Cdx1pHoNxDG7KA6am7XjWWxGWv/IHTPiHCJjJ9yGviA== X-Received: by 2002:ad4:5651:: with SMTP id bl17mr21719930qvb.49.1630417130490; Tue, 31 Aug 2021 06:38:50 -0700 (PDT) Received: from [192.168.1.79] (bras-base-kntaon1617w-grc-28-184-148-47-47.dsl.bell.ca. [184.148.47.47]) by smtp.googlemail.com with ESMTPSA id v3sm14063899qkd.20.2021.08.31.06.38.49 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 31 Aug 2021 06:38:50 -0700 (PDT) Subject: Re: [PATCH bpf-next v2 00/13] bpfilter To: Dmitrii Banshchikov Cc: bpf@vger.kernel.org, ast@kernel.org, davem@davemloft.net, daniel@iogearbox.net, andrii@kernel.org, kafai@fb.com, songliubraving@fb.com, yhs@fb.com, john.fastabend@gmail.com, kpsingh@kernel.org, netdev@vger.kernel.org, rdna@fb.com References: <20210829183608.2297877-1-me@ubique.spb.ru> <20210831124856.fucr676zd365va7c@amnesia> From: Jamal Hadi Salim Message-ID: Date: Tue, 31 Aug 2021 09:38:48 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0 MIME-Version: 1.0 In-Reply-To: <20210831124856.fucr676zd365va7c@amnesia> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Precedence: bulk List-ID: X-Mailing-List: bpf@vger.kernel.org On 2021-08-31 8:48 a.m., Dmitrii Banshchikov wrote: > On Mon, Aug 30, 2021 at 09:56:18PM -0400, Jamal Hadi Salim wrote: >> On 2021-08-29 2:35 p.m., Dmitrii Banshchikov wrote: >> >> Something is not clear from your email: >> You seem to indicate that no traffic was running in test 1. >> If so, why would 32 rulesets give different results than 1? > > I mentioned the lower and upper bound values for bogo-ops on the > machine. The lower bound is when there is traffic and no firewall > at all. The upper bound is when there is no firewall and no > traffic. Then the first test measures bogo-ops for two rule sets > when there is traffic for either iptables, nft or bpfilter. > Thanks, I totally misread that. I did look at stress-ng initially to use it to stress the system and emulate some real world setup (polluting cache etc) while testing but the variability of the results was bad - so dropped it earlier. Maybe we should look at it again. cheers, jamal