netfilter: xtables: generate initial table on-demand
authorJan Engelhardt <jengelh@medozas.de>
Wed, 17 Jun 2009 20:14:54 +0000 (22:14 +0200)
committerJan Engelhardt <jengelh@medozas.de>
Wed, 10 Feb 2010 16:50:47 +0000 (17:50 +0100)
commite3eaa9910b380530cfd2c0670fcd3f627674da8a
tree309e522e78f78149ec3cb99ffc386d1b72415a96
parent2b95efe7f6bb750256a702cc32d33b0cb2cd8223
netfilter: xtables: generate initial table on-demand

The static initial tables are pretty large, and after the net
namespace has been instantiated, they just hang around for nothing.
This commit removes them and creates tables on-demand at runtime when
needed.

Size shrinks by 7735 bytes (x86_64).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
18 files changed:
include/linux/netfilter_arp/arp_tables.h
include/linux/netfilter_ipv4/ip_tables.h
include/linux/netfilter_ipv6/ip6_tables.h
net/ipv4/netfilter/arp_tables.c
net/ipv4/netfilter/arptable_filter.c
net/ipv4/netfilter/ip_tables.c
net/ipv4/netfilter/iptable_filter.c
net/ipv4/netfilter/iptable_mangle.c
net/ipv4/netfilter/iptable_raw.c
net/ipv4/netfilter/iptable_security.c
net/ipv4/netfilter/nf_nat_rule.c
net/ipv6/netfilter/ip6_tables.c
net/ipv6/netfilter/ip6table_filter.c
net/ipv6/netfilter/ip6table_mangle.c
net/ipv6/netfilter/ip6table_raw.c
net/ipv6/netfilter/ip6table_security.c
net/netfilter/x_tables.c
net/netfilter/xt_repldata.h [new file with mode: 0644]