From: Jesse Brandeburg <jesse.brandeburg(a)gmail.com>
Date: Wed, 6 Apr 2011 11:51:06 -0700
perf showed netfilter being prominent, and removing it gives me much
higher throughput. Is there a reason CONFIG_NETFILTER=y ? Isn't it a
good thing to be able to disable netfilter if you want to?
CONFIG_NETFILTER=y is the only possible non-disabled setting, as it's
a boolean.
All that is enabling is the hooks, and it's not possible to provide
netfilter at all without the hooks being compiled into the kernel
image.
Fedora by default is also probably installing several defauly
netfilter rules, make sure to remove them.