Project

General

Profile

Actions

Optimization #6277

open

Attach XDP filter with libxdp

Added by Vincent Li 10 months ago. Updated 10 months ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:
C, Needs backport to 6.0

Description

When Suricata attaches XDP filter to the NIC, we could not attach another XDP program to the same NIC. with libxdp (also see https://lpc.events/event/7/contributions/671/attachments/561/992/xdp-multiprog.pdf) we can attach multiple XDP programs on the same NIC including suricata's XDP filter, the use cases are users could attach DDOS XDP programs to the same NIC that suricata's XDP filter attaches to, so Suricata does not need to deal with DDOS packet scenario to reduce Suricata's workload.

Actions

Also available in: Atom PDF