linux-stable-rt/net/ipv4/netfilter
Harald Welte 188bab3ae0 [NETFILTER]: Fix invalid module autoloading by splitting iptable_nat
When you've enabled conntrack and NAT as a module (standard case in all
distributions), and you've also enabled the new conntrack netlink
interface, loading ip_conntrack_netlink.ko will auto-load iptable_nat.ko.
This causes a huge performance penalty, since for every packet you iterate
the nat code, even if you don't want it.

This patch splits iptable_nat.ko into the NAT core (ip_nat.ko) and the
iptables frontend (iptable_nat.ko).  Threfore, ip_conntrack_netlink.ko will
only pull ip_nat.ko, but not the frontend.  ip_nat.ko will "only" allocate
some resources, but not affect runtime performance.

This separation is also a nice step in anticipation of new packet filters
(nf-hipac, ipset, pkttables) being able to use the NAT core.

Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2005-09-26 15:25:11 -07:00
..
Kconfig [NETFILTER]: Fix ip[6]t_NFQUEUE Kconfig dependency 2005-09-24 16:52:03 -07:00
Makefile [NETFILTER]: Fix invalid module autoloading by splitting iptable_nat 2005-09-26 15:25:11 -07:00
arp_tables.c
arpt_mangle.c
arptable_filter.c
ip_conntrack_amanda.c [NETFILTER] Fix conntrack event cache deadlock/oops 2005-09-22 23:46:57 -07:00
ip_conntrack_core.c [NETFILTER] Fix conntrack event cache deadlock/oops 2005-09-22 23:46:57 -07:00
ip_conntrack_ftp.c [NETFILTER]: Use correct type for "ports" module parameter 2005-09-13 13:48:00 -07:00
ip_conntrack_helper_pptp.c [NETFILTER] Fix conntrack event cache deadlock/oops 2005-09-22 23:46:57 -07:00
ip_conntrack_irc.c [NETFILTER]: Use correct type for "ports" module parameter 2005-09-13 13:48:00 -07:00
ip_conntrack_netbios_ns.c [NETFILTER] Fix conntrack event cache deadlock/oops 2005-09-22 23:46:57 -07:00
ip_conntrack_netlink.c [NETFILTER]: Rename misnamed function 2005-09-19 15:35:31 -07:00
ip_conntrack_proto_generic.c
ip_conntrack_proto_gre.c [NETFILTER] ip_conntrack: Update event cache when status changes 2005-09-24 16:56:08 -07:00
ip_conntrack_proto_icmp.c
ip_conntrack_proto_sctp.c [NETFILTER] ip_conntrack: Update event cache when status changes 2005-09-24 16:56:08 -07:00
ip_conntrack_proto_tcp.c [NETFILTER] ip_conntrack: Update event cache when status changes 2005-09-24 16:56:08 -07:00
ip_conntrack_proto_udp.c
ip_conntrack_standalone.c [NETFILTER] Fix conntrack event cache deadlock/oops 2005-09-22 23:46:57 -07:00
ip_conntrack_tftp.c [NETFILTER]: Use correct type for "ports" module parameter 2005-09-13 13:48:00 -07:00
ip_nat_amanda.c
ip_nat_core.c [NETFILTER]: Fix invalid module autoloading by splitting iptable_nat 2005-09-26 15:25:11 -07:00
ip_nat_ftp.c
ip_nat_helper.c [NETFILTER]: Fix invalid module autoloading by splitting iptable_nat 2005-09-26 15:25:11 -07:00
ip_nat_helper_pptp.c [NETFILTER]: Add new PPTP conntrack and NAT helper 2005-09-19 15:33:08 -07:00
ip_nat_irc.c
ip_nat_proto_gre.c [NETFILTER]: Add new PPTP conntrack and NAT helper 2005-09-19 15:33:08 -07:00
ip_nat_proto_icmp.c
ip_nat_proto_tcp.c
ip_nat_proto_udp.c
ip_nat_proto_unknown.c
ip_nat_rule.c [NETFILTER]: Handle NAT module load race 2005-09-06 15:09:43 -07:00
ip_nat_snmp_basic.c
ip_nat_standalone.c [NETFILTER]: Fix invalid module autoloading by splitting iptable_nat 2005-09-26 15:25:11 -07:00
ip_nat_tftp.c
ip_queue.c
ip_tables.c [NETFILTER]: Add goto target 2005-08-29 16:04:18 -07:00
ipt_CLASSIFY.c
ipt_CLUSTERIP.c [NETFILTER] CLUSTERIP: use a bitmap to store node responsibility data 2005-09-16 17:00:04 -07:00
ipt_CONNMARK.c
ipt_DSCP.c
ipt_ECN.c
ipt_LOG.c
ipt_MARK.c
ipt_MASQUERADE.c [NETFILTER]: Fix DHCP + MASQUERADE problem 2005-09-13 13:49:15 -07:00
ipt_NETMAP.c
ipt_NFQUEUE.c
ipt_NOTRACK.c
ipt_REDIRECT.c [NETFILTER]: Fix rcu race in ipt_REDIRECT 2005-09-13 13:48:58 -07:00
ipt_REJECT.c [XFRM]: Always release dst_entry on error in xfrm_lookup 2005-09-08 15:11:55 -07:00
ipt_SAME.c
ipt_TCPMSS.c
ipt_TOS.c
ipt_TTL.c [NETFILTER]: Add new iptables TTL target 2005-08-29 16:13:22 -07:00
ipt_ULOG.c
ipt_addrtype.c
ipt_ah.c
ipt_comment.c
ipt_connbytes.c
ipt_connmark.c
ipt_conntrack.c
ipt_dccp.c
ipt_dscp.c
ipt_ecn.c
ipt_esp.c
ipt_hashlimit.c [NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointers 2005-08-29 16:11:18 -07:00
ipt_helper.c
ipt_iprange.c
ipt_length.c
ipt_limit.c
ipt_mac.c
ipt_mark.c
ipt_multiport.c
ipt_owner.c [PATCH] files: lock-free fd look-up 2005-09-09 13:57:55 -07:00
ipt_physdev.c
ipt_pkttype.c
ipt_realm.c
ipt_recent.c
ipt_sctp.c
ipt_state.c
ipt_string.c [NETFILTER]: Add string match 2005-08-29 16:04:07 -07:00
ipt_tcpmss.c
ipt_tos.c
ipt_ttl.c
iptable_filter.c
iptable_mangle.c
iptable_raw.c