diff options
| author |   Florian Westphal <fw@strlen.de> | 2023-01-03 13:47:15 +0100 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2023-01-18 13:05:25 +0100 |
| commit | d8d76062785548167cbc01eb5aaae2ae0665b5da (patch) | |
| tree | 8c5e07d81e9163e50d801361e4cd79d486caf281 /net/netfilter/nft_objref.c | |
| parent | netfilter: ip_tables: remove clusterip target (diff) | |
| download | wireguard-linux-d8d76062785548167cbc01eb5aaae2ae0665b5da.tar.xz wireguard-linux-d8d76062785548167cbc01eb5aaae2ae0665b5da.zip | |
netfilter: nf_tables: add static key to skip retpoline workarounds
If CONFIG_RETPOLINE is enabled nf_tables avoids indirect calls for
builtin expressions.
On newer cpus indirect calls do not go through the retpoline thunk
anymore, even for RETPOLINE=y builds.
Just like with the new tc retpoline wrappers:
Add a static key to skip the if / else if cascade if the cpu
does not require retpolines.
Suggested-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'net/netfilter/nft_objref.c')
0 files changed, 0 insertions, 0 deletions