Feature #5838
opendpdk: NIC encapsulation stripping
Description
Possibly an experiment, especially aimed at IDS setups, where Suricata is not interested in encapsulation inspection.
Some NICs offer native HW offload and that could shave off a few bytes of each packet.
The offload would target the DPDK capture interface.
PA Updated by Philippe Antoine over 2 years ago
- Related to Task #6443: Suricon 2023 brainstorm added
LS Updated by Lukas Sismis over 2 years ago
- Status changed from New to Assigned
LS Updated by Lukas Sismis about 1 year ago
VJ Updated by Victor Julien about 1 year ago
- Related to Feature #7330: dpdk: support HW VLAN stripping added
LS Updated by Lukas Sismis about 1 year ago
- Status changed from Assigned to In Progress
- Assignee changed from Lukas Sismis to Adam Kiripolsky
Partially completed.
VLAN stripping:
https://github.com/OISF/suricata/pull/12016
Possible other updates:
other rte_flow actions such as:
OF_POP_VLAN
OF_POP_MPLS
VXLAN_DECAP
NVGRE_DECAP
LS Updated by Lukas Sismis about 1 year ago
As this is not yet part of a stable release I propose to change vlan-stripping-offload: bool configuration name to something more generic, e.g.:
encap-stripping: ["vlan", "geneve", "mpls"]
This could be in the form of an array, where individual stripping offloads would be listed. This can save us from having individual stripping offloads listed as boolean properties.
LS Updated by Lukas Sismis about 1 year ago
Docs update merged in https://github.com/OISF/suricata/pull/12877
VJ Updated by Victor Julien 12 months ago
- Target version changed from 8.0.0-beta1 to 9.0.0-beta1