|
|
@@ -1,20 +0,0 @@
|
|
|
-From: Felix Fietkau <[email protected]>
|
|
|
-Subject: kernel: add a small xfrm related performance optimization
|
|
|
-
|
|
|
-Signed-off-by: Felix Fietkau <[email protected]>
|
|
|
----
|
|
|
- net/netfilter/nf_nat_core.c | 3 +++
|
|
|
- 1 file changed, 3 insertions(+)
|
|
|
-
|
|
|
---- a/net/netfilter/nf_nat_core.c
|
|
|
-+++ b/net/netfilter/nf_nat_core.c
|
|
|
-@@ -110,6 +110,9 @@ int nf_xfrm_me_harder(struct net *net, s
|
|
|
- struct sock *sk = skb->sk;
|
|
|
- int err;
|
|
|
-
|
|
|
-+ if (skb->dev && !dev_net(skb->dev)->xfrm.policy_count[XFRM_POLICY_OUT])
|
|
|
-+ return 0;
|
|
|
-+
|
|
|
- err = xfrm_decode_session(skb, &fl, family);
|
|
|
- if (err < 0)
|
|
|
- return err;
|