suricata

Author	SHA1	Message	Date
Eric Leblond	f04391031f	af-packet: XDP bypass in IPS mode Implement XDP bypass in IPS mode by using XDP redirect to send packets from bypassed flow directly to the transmission interface.	7 years ago
Eric Leblond	4f57008a23	af-packet: add support for XDP cpu redirect map This patch adds a boolean option "xdp-cpu-redirect" to af-packet interface configuration. If set, then the XDP filter will load balance the skb creation on specified CPUs instead of doing the creation on the CPU handling the packet. In the case of a card with asymetric hashing this will allow to avoid saturating the single CPU handling the trafic. The XDP filter must contains a set of map allowing load balancing. This is the case of xdp_filter.bpf. Fixed-by: Jesper Dangaard Brouer <netoptimizer@brouer.com>	7 years ago
Eric Leblond	cde438f670	af-packet: add missing copyright header And also fixes the copyright date in some files.	7 years ago
Eric Leblond	17a32bdaa0	af-packet: fix bypassing of IPv6 Also misc fixes.	7 years ago
Eric Leblond	8c88087948	af-packet: implementation of XDP bypass This patch adds support for XDP bypass. It provides an XDP filter that can be loaded to realize the bypass of flows.	7 years ago