[LEDE-DEV] [RFC] Enable kmod-ipt-debug by default

[Carl-Daniel Hailfinger]

On 28.05.2016 12:11, Carl-Daniel Hailfinger wrote:
> On 27.05.2016 12:45, Carl-Daniel Hailfinger wrote:
>> On 27.05.2016 10:33, Jo-Philipp Wich wrote:
>>> If a kmod is specifically disabled by default settings then it usually
>>> has a performance penalty attached with it, even when not loaded.
>>>
>>> I'd be grateful if someone could do some iperf throughput testing with
>>> and without kmod-ipt-debug built/enabled/loaded and see if it makes any
>>> difference at all.
> What would be the most useful iperf tests? LAN-Client to LAN-Client
> bridging, LAN-Client to Router, or something completely different?
>
> I can perform iperf testing, but I don't have enough hard disk space and
> CPU resources to build the required images for my Archer C7 v2.
>
> If anyone can provide images which only differ in availability of
> KernelPackage/ipt-debug, I will test them on my TP-Link Archer C7 v2
> with iperf.

From: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006 at gmx.net>

The xt_TRACE kernel module can be used to debug the path of a network
packet through the filter rules. Building it as a module by default (it
is part of kmod-ipt-debug) would help in some situations.

Untested.

Signed-off-by: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006 at gmx.net>

diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk
index 353de3e..9983b66 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -424,7 +424,6 @@ $(eval $(call KernelPackage,ipt-nfqueue))
 define KernelPackage/ipt-debug
   TITLE:=Module for debugging/development
   KCONFIG:=$(KCONFIG_IPT_DEBUG)
-  DEFAULT:=n
   FILES:=$(foreach mod,$(IPT_DEBUG-m),$(LINUX_DIR)/net/$(mod).ko)
   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_DEBUG-m)))
   $(call AddDepends/ipt)