Project

General

Profile

Feature #721

full nfq zero copy mode

Added by Victor Julien over 6 years ago. Updated 5 months ago.

Status:
New
Priority:
Normal
Target version:
Effort:
medium
Difficulty:
high
Label:

Description

Currently the nfq lib doesn't support zero copy. Each "recv" call will overwrite an internal buffer, so that it's not possible to just keep a reference to this buffer.

In the single/workers runmodes this is not a problem, as all packets are processed before the next recv call.

But in auto/autofp recv, verdict and all other packet handling runs async, so we may have multiple recv calls before a packet is processed and verdicted fully. Therefore, these modes need to work on copies of the data.

Work is being done by the netfilter project to address this, once that is available, we can support zero copy for all runmodes properly.

History

#1

Updated by Andreas Herz over 3 years ago

Victor Julien wrote:

Work is being done by the netfilter project to address this, once that is available, we can support zero copy for all runmodes properly.

Do you have more details on that?

#2

Updated by Victor Julien over 3 years ago

Sadly, no. Florian, Eric and myself talked about doing a new nfq API but AFAIK nothing was implemented by any of us.

#3

Updated by Victor Julien over 2 years ago

  • Status changed from Assigned to New
  • Assignee changed from Eric Leblond to Anonymous
#4

Updated by Victor Julien about 1 year ago

  • Effort set to medium
  • Difficulty set to high
#5

Updated by Andreas Herz 5 months ago

  • Assignee set to Community Ticket

Also available in: Atom PDF