Actions
Optimization #808
open
EL
CT
Feature #1234: nfqueue: use mnl API
Support the new GSO-avoidance NFQ feature
Optimization #808:
Support the new GSO-avoidance NFQ feature
Effort:
high
Difficulty:
high
Label:
Description
Florian Westphal has recently submitted a patchset that allow kernel not to split big packet received by network card. This provides a performance boost.
The patchset is available here: http://www.spinics.net/lists/netfilter-devel/msg26029.html
Suricata should support this to increase its performance in IPS mode.
Actions