On Mon, Mar 18, 2013 at 06:51:19AM -0700, Eric Dumazet wrote: > On Mon, 2013-03-18 at 10:24 +0100, Florian Westphal wrote: > > Eric Dumazet <eric.dumazet@xxxxxxxxx> wrote: > > > > > > -GRO/GSO packets are segmented in nf_queue() > > > and checksummed in nfqnl_build_packet_message(). > > > Proper support for GSO/GRO packets (no segmentation, > > > and no checksumming) needs application cooperation, if we > > > want no regressions. > > > > Since ipqueue is gone we might be able to push the segmentation > > down to nfnetlink_queue. Then new userspace applications > > could indicate a 'I won't verify checksums and will handle huge > > packets'. > > > > Are you working on something like this? > > I validated that it was only an API concern, by commenting out the code, > and got 20Gbps (link speed) using the sample program (using a bigger > buffer to receive the skbs and removing the printf() for each packet) > > Pablo followed the experiments and I believe he has an idea of the > needed API. Will take over this. Florian, ping me if interested in helping. Thanks a lot for the patch and ideas Eric! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html