On Sun, 26 Nov 2017, Kevin Darbyshire-Bryant wrote:

>> I don't really know. We want cake to compile without conntrack
>> (it's expensive).
>
> I’m slightly confused by that statement - The conntrack lookup is controlled per instance and is one conditional in the code path:

It's not the cake lookup that's expensive, it's the overhead of running 
conntrack on the system that's expensive.

Yes, most distros enable it by default, but we don't want cake to not work on a 
system that has it disabled (although some things may not work as well, 
gracefull degredation)