Hi, On Sat, 2013-03-23 at 20:52 +0100, Holger Eitzenberger wrote: > Hi Eric, > > > If possible, it could be interesting to be able to setup the balance > > parameter by using an option in the same way fail-open option: > > uint32_t flags = NFQA_CFG_F_FAIL_OPEN; > > uint32_t mask = NFQA_CFG_F_FAIL_OPEN; > > int r = nfq_set_queue_flags(qh, mask, flags); > > This way, it is possible to tune the system without changing the > > ruleset. > > Not sure how the FAIL_OPEN relates to the CPU fanout. Do you want to > setup the CPU fanout (on, off) per queue? You are right on a major point. FAIL_OPEN is definitely per-queue and CPU fanout is related to a fanout group. So we will have to have the whole mechanism bind to a queue, warn the kernel that it is in a fanout group... That could be interesting as we will be able to tune the setting from the application but this seems to be a lot of work too. And I don't see any functional benefit omit this tuning from the application. So, if you don't find any other one, forgot my request for now :) BR, -- Eric Leblond <eric@xxxxxxxxx> Blog: https://home.regit.org/ -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
