From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from bifrost.lang.hm (lang.hm [66.167.227.134]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 7AF413BA8E for ; Wed, 25 Apr 2018 14:45:00 -0400 (EDT) Received: from asgard.lang.hm (asgard.lang.hm [10.0.0.100]) by bifrost.lang.hm (8.13.4/8.13.4/Debian-3) with ESMTP id w3PIitis023932; Wed, 25 Apr 2018 11:44:55 -0700 Date: Wed, 25 Apr 2018 11:44:55 -0700 (PDT) From: David Lang X-X-Sender: dlang@asgard.lang.hm To: =?ISO-8859-15?Q?Toke_H=F8iland-J=F8rgensen?= cc: Pete Heist , Jonathan Morton , cake@lists.bufferbloat.net In-Reply-To: <87r2n5802t.fsf@toke.dk> Message-ID: References: <871sf6xqne.fsf@toke.dk> <003D19B8-73F8-46D4-8FC8-95F6E518D3B5@eventide.io> <311BE3FC-9211-4B33-AD46-444F21E2A38A@gmail.com> <6A13BD7F-D682-4864-B5DB-2352C1C3F529@eventide.io> <87r2n5802t.fsf@toke.dk> User-Agent: Alpine 2.02 (DEB 1266 2009-07-14) MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="680960-1023092757-1524681896=:12043" Subject: Re: [Cake] Pre-print of Cake paper available X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Apr 2018 18:45:00 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --680960-1023092757-1524681896=:12043 Content-Type: TEXT/PLAIN; charset=utf-8; format=flowed Content-Transfer-Encoding: 8BIT On Tue, 24 Apr 2018, Toke Høiland-Jørgensen wrote: > Pete Heist writes: > >>> On Apr 24, 2018, at 7:58 AM, Jonathan Morton wrote: >>> >>> Turning NAT support on by default might actually be reasonable, since >>> it doesn't really break anything if it's not needed - it just eats a >>> bit of CPU with unnecessary conntrack lookups. >> >> I would be for it, if it eats say < 1% additional CPU, and preferably >> less. I expect the impact to increase with packet rates. > > I'm a bit worried that the way it is implemented now, if we turn it on > by default we risk activating conntrack even when it was otherwise > disabled... I will say that just about every system ships with conntrack enabled, and disabling it can be pretty difficult (especially in LEDE/OpenWRT), there are so many things that require it that tracking them all down and disabling them is very difficult. There are not that many places where Cake is going to be used that NAT or some other thing that requires connection tracking is not also going to be used, in the remaining cases, can it be disabled manually in configs after it's been sucked in automatically? --680960-1023092757-1524681896=:12043--