Project

General

Profile

Actions

Feature #808

open

Feature #1234: nfqueue: use mnl API

Support the new GSO-avoidance NFQ feature

Added by Eric Leblond over 8 years ago. Updated over 2 years ago.

Status:
Assigned
Priority:
Normal
Target version:
Effort:
high
Difficulty:
high
Label:

Description

Florian Westphal has recently submitted a patchset that allow kernel not to split big packet received by network card. This provides a performance boost.

The patchset is available here: http://www.spinics.net/lists/netfilter-devel/msg26029.html

Suricata should support this to increase its performance in IPS mode.

Actions

Also available in: Atom PDF