Actions
Optimization #808
openFeature #1234: nfqueue: use mnl API
Support the new GSO-avoidance NFQ feature
Effort:
high
Difficulty:
high
Label:
Description
Florian Westphal has recently submitted a patchset that allow kernel not to split big packet received by network card. This provides a performance boost.
The patchset is available here: http://www.spinics.net/lists/netfilter-devel/msg26029.html
Suricata should support this to increase its performance in IPS mode.
Actions