From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.toke.dk (mail.toke.dk [IPv6:2001:470:dc45:1000::1]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id D38DA3B2A4 for ; Tue, 24 Apr 2018 04:45:15 -0400 (EDT) From: Toke =?utf-8?Q?H=C3=B8iland-J=C3=B8rgensen?= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=toke.dk; s=20161023; t=1524559514; bh=P7mOiOKUlS4MnbufQHKY15/hPWrKh5rUi64SQLlkyFY=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=smq6+tGNIxhAO+V5ZVdMR/NaDywkanTw8qI1nhBquQ6GflPDu3Py1+3Ioz2cWDkwI tiu703yy4UgfG4humxf8uxOHGTF8cHJ2zF8wyx3iaPyjgtX2BrMr7E8mNxCF8kPA5K vZtBGK1jeDNQD/jBX0YE11kYusRiTQQPBjMCvaWi0x2MvzfpzySc60nDiTPNZ9gynC so/zFOi8QvTtBB00mjpUfRBTmsZw8AjoOueEhW47bc+wbQ3Okc1OTcJc1ty191TTwr si0TdfhJKC2tjNAsKKfqWmpKTA9EZuptFL+1SBoFYhHj3lj8G/FYXxRArRgA3Y6BbH LAp23J/Q2Fe7g== To: Pete Heist , Jonathan Morton Cc: cake@lists.bufferbloat.net In-Reply-To: <6A13BD7F-D682-4864-B5DB-2352C1C3F529@eventide.io> References: <871sf6xqne.fsf@toke.dk> <003D19B8-73F8-46D4-8FC8-95F6E518D3B5@eventide.io> <311BE3FC-9211-4B33-AD46-444F21E2A38A@gmail.com> <6A13BD7F-D682-4864-B5DB-2352C1C3F529@eventide.io> Date: Tue, 24 Apr 2018 10:45:14 +0200 X-Clacks-Overhead: GNU Terry Pratchett Message-ID: <87r2n5802t.fsf@toke.dk> MIME-Version: 1.0 Content-Type: text/plain Subject: Re: [Cake] Pre-print of Cake paper available X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Apr 2018 08:45:16 -0000 Pete Heist writes: >> On Apr 24, 2018, at 7:58 AM, Jonathan Morton wrote: >> >> Turning NAT support on by default might actually be reasonable, since >> it doesn't really break anything if it's not needed - it just eats a >> bit of CPU with unnecessary conntrack lookups. > > I would be for it, if it eats say < 1% additional CPU, and preferably > less. I expect the impact to increase with packet rates. I'm a bit worried that the way it is implemented now, if we turn it on by default we risk activating conntrack even when it was otherwise disabled... That would be a bad side effect, so I think it's better to be safe and leave it for userspace to enable (which, again, we could do by default in sqm-scripts). -Toke