Re: [PATCH] Inbound Connection Control mechanism: Prioritized Accept

[Alan Cox]

> There are couple of reasons why prioritization in kernel works better than at 
> user level. 
> * The kernel mechanisms are more efficient and scalable than the user space
>   mechanism. Non compliant connection requests are discarded earlier reducing the
>   queuing time of the compliant requests, in particular less CPU is consumed and
>   the context switch to userspace is avoided. 

Im not sure this is that true. I just added a user space implementation to
thttpd to favour one network range and close under load on others to keep
capacity there. Its a ten minute hack, and Im still seeing the same 1400
hits per second or so I was before.

Alan