Result for terse dumping 1m simple rules (flower with L2 key + gact drop) on current net-next: $ time sudo tc -s filter show terse dev ens1f0 ingress >/dev/null real 0m3.445s user 0m2.087s sys 0m1.298s With patch applied: $ time sudo tc -s filter show terse dev ens1f0_0 ingress >/dev/null real 0m5.035s user 0m3.289s sys 0m1.687s As we can see this leads to 30% overhead in kernel space execution time. Now with more complex rules (flower 5tuple + act tunnel key + act mirred) on current net-next: $ time sudo tc -s filter show terse dev ens1f0 ingress >/dev/null real 0m4.052s user 0m2.065s sys 0m1.937s Same rules with patch applied: $ time sudo tc -s filter show terse dev ens1f0_0 ingress >/dev/null real 0m6.346s user 0m3.166s sys 0m3.108s With more complex rules performance impact on kernel space execution time get more severe (60%). Overall, this looks like significant degradation.