mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
315c29a8e6
Kernel time is not available (and/or costly) on NIC such as Netronome so we update the logic to detect dead flows based on a lack of update of packets counters. This way, the XDP filter will be usable by network card. This patch also updates the ebpf code to support per CPU and regular mapping. Netronome is not supporting it and the structure is using atomic for counter so the cost of simultaneous update is really low. This patch also updates the xdp_filter to be able to select if the flow table is per CPU on shared. Second option will be used for hardward offload. To deactivate the per cpu hash, you need to set USE_PERCPU_HASH to 0. This patch also adds an new option to af-packet named no-percpu-hash If this option is set to yes then the Flow bypassed manager thread will use one CPU instead of the number of cores. By doing that we are able to handle the case where USE_PERCPU_HASH is unset (so hardware offload for Netronome). This patch also remove aligment indications in the eBPF filter. This was not really needed and it seems it is causing problem with some recent version of LLVM toolchain. |
5 years ago | |
|---|---|---|
| .. | ||
| doxygen | ||
| userguide | 5 years ago | |
| AUTHORS | ||
| Basic_Setup.txt | ||
| GITGUIDE | ||
| INSTALL | ||
| INSTALL.PF_RING | ||
| INSTALL.WINDOWS | ||
| Makefile.am | ||
| NEWS | ||
| README | ||
| Setting_up_IPSinline_for_Linux.txt | ||
| TODO | ||
| Third_Party_Installation_Guides.txt | ||