Cuong Nguyen 1e5432cccd Add netlink-lib to manage conntrack entries ...

When the security group is updated, the conntrack entries will be deleted
by conntrack-tools with each rule associated with each SG rule.

In large scale system, updating so much rules will call a large number
of subprocesses to implement the "conntrack -D" commands. That will
consume the system resource and time.

This netlink-lib will be used by netlink conntrack driver to improve
conntrack management performance.

Original solution and performance from neutron-fwaas [1]

[1] https://review.openstack.org/#/c/438445/

Co-Authored-By: Cao Xuan Hoang <hoangcx@vn.fujitsu.com>
Change-Id: I7503c87900eb0f7bc5386f915b925bb2576502cc

2017-07-27 13:56:40 +07:00

0 lines

0 B

Python

Raw Blame History

The file is empty.