Project

General

Profile

Actions

Optimization #5755

open
VJ EL

datasets: ipv4.src/dst, ip.src/dst check rules should be ip-only

Optimization #5755: datasets: ipv4.src/dst, ip.src/dst check rules should be ip-only

Added by Victor Julien almost 4 years ago. Updated 9 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Since these match on a fixed property of the flow (src/dst addresses), there is no point in checking these rules per packet?

Complication is that the sets may change during the lifetime of a flow.

PA Updated by Philippe Antoine 8 months ago Actions #1

Why is this in feedback status Victor ?

SB Updated by Shivani Bhardwaj 9 days ago Actions #2

I thought about this too and landed on this ticket!

Complication is that the sets may change during the lifetime of a flow.

Correct. How about we restrict the ip-only selection to static datasets i.e. those that are just used with the load command so they should not change -- note these are also the only datasets that are reloaded on rule reloads too otherwise we have the same problem there too (an update may happen during reload).

Actions

Also available in: PDF Atom