On Thu, 19 Dec 2019 07:09:58 +0100 Björn Töpel <bjorn.topel@xxxxxxxxx> wrote: > $ sudo ./xdp_redirect_cpu --dev enp134s0f0 --cpu 22 xdp_cpu_map0 ^^^^^^^^^^^^ > > Running XDP/eBPF prog_name:xdp_cpu_map5_lb_hash_ip_pairs ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > XDP-cpumap CPU:to pps drop-pps extra-info > XDP-RX 20 7723038 0 0 > XDP-RX total 7723038 0 [...] Talking about how to invoke the 'xdp_redirect_cpu' program, I notice that you are using BPF-prog named: 'xdp_cpu_map5_lb_hash_ip_pairs' (default) but on cmdline it looks like you want 'xdp_cpu_map0'. You need to use '--prog xdp_cpu_map0'. It will make a HUGE performance difference. Like: sudo ./xdp_redirect_cpu --dev mlx5p1 --cpu 22 --prog xdp_cpu_map0 (p.s. The load-balance hash_ip_pairs is the default, because it is usable for solving the most common issue, where the NIC is not RSS distributing traffic correctly, e.g. ixgbe Q-in-Q. And it is close to the Suricata approach.) -- Best regards, Jesper Dangaard Brouer MSc.CS, Principal Kernel Engineer at Red Hat LinkedIn: http://www.linkedin.com/in/brouer