suricata

Author	SHA1	Message	Date
Eric Leblond	bc34703c09	ebpf: add some comments to eBPF filter	7 years ago
Eric Leblond	0807dd6740	ebpf: slight bypass_filter optimization	7 years ago
Eric Leblond	cde438f670	af-packet: add missing copyright header And also fixes the copyright date in some files.	7 years ago
Eric Leblond	8c88087948	af-packet: implementation of XDP bypass This patch adds support for XDP bypass. It provides an XDP filter that can be loaded to realize the bypass of flows.	7 years ago
Eric Leblond	31c947b4d8	af-packet: use per CPU hash in bypass eBPF has a data type which is a per CPU array. By adding one element to the array it is in fact added to all per CPU arrays in the kernel. This allows to have a lockless structure in the kernel even when doing counter update. In userspace, we need to update the flow bypass code to fetch all elements of the per CPU arrays.	7 years ago
Eric Leblond	06173267c6	af-packet: kernel bypass implementation This patch implements bypass capability for af-packet. The filter only bypass TCP and UDP in IPv4 and IPv6. It don't don't bypass IPv6 with extended headers. This patch also introduces a bypassed flow manager that takes care of timeouting the bypassed flows. It uses a 60 sec timeout on flow. As they are supposed to be active we can try that. If they are not active then we don't care to get them back in Suricata.	7 years ago